* chore: prevent ci from running twice on PRs

Now CI will only run on push to `master` and PRs to `master`. Previously, it was
running twice on each push to a PR branch, once for the PR to `master` and once 
for pushing to the PR branch.