ci: split container push steps to separate job and add deploy tag