Fix main branch push

A misunderstanding with the ci file linter lead to an incorrect only block. Instead use a rules:if block to limit pushes to the latest tag.