Only push containers on a push event
Only push containers on a push event

- we don't want a rogue PR creating a container in the registry.
  GitHub won't let it happen by default anyway.

tofu-rocketry/ssm,apel/ssm,apel/ssm,tofu-rocketry/ssm