add(ci): Run release builds and production Docker image tests on pull requests

[teor2345]

Motivation

Currently we don't run tests on our production images until after the release has been tagged. Tests on main branch pushes were accidentally disabled as part of PR #6895.

So if there are any bugs or breaking changes in the release build or docker image, we'll have to tag another bug fix release.

Instead, we can run the release build and tests on every PR. (But not deploy any instances.)

Complex Code or Requirements

We need a patch workflow to create a branch protection rule, which stops buggy PRs merging.

Solution

Run the release build and test jobs on PRs when relevant code or configs change. The workflow conditions already restrict deployments to release, workflow_dispatch, or main branch push events.

Related fixes:

• Remove the manual docker test from the release checklist
• Update the workflow run conditions for CI docker tests, we missed a file that docker uses, and split out a workflow

Final Tasks

• Admin: Add a branch protection rule for the new test job after this PR merges

Review

@gustavovalverde this might help with testing PR #7045?

Reviewer Checklist

• Are the PR labels correct?
• Does the code do what the ticket and PR says?
  • Does it change concurrent code, unsafe code, or consensus rules?
• How do you know it works? Does it have tests?

Follow Up Work

We might add more tests as part of PR #7045.

After we finish changing the Dockerfile and entrypoint scripts, we could disable the tests on every PR, and enable them on the main branch. We could use a GitHub Actions variable to enable/disable PR tests.

We might want to make release builds more efficient, by improving caching.

[gustavovalverde]

LGTM