build(ci): only run tests on PRs and merges, not direct pushes

Replace the push trigger with pull_request closed event and a
conditional check so tests run on PR activity and merges but not
on direct pushes to master, saving CI credits.