The workflow only triggered on pull_request, which meant the image
tagged with a PR commit SHA would get pushed to ECR, but the merge
commit to main never produced a fresh image. Deploy tooling resolving
main to an ECR tag would either miss or pick up a stale PR build.
Match bskyweb-aws: `push: branches: [main]` + `workflow_dispatch`.
Drops the pull_request trigger entirely. If Dockerfile validation on
PRs is wanted back, we can add a hybrid pattern later (build-on-PR,
push-only-on-main).
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Austin McKinley
3213eeb273