I propose: - [x] Image builds on PRs and on pushes/merges to master - [x] Publishing on pushes/merges to master This ensures we don't publish problematic images and the master branch is always up-to-date and passing builds. This will require *two* GH actions.