ci: allow pushing of containers during pull requests