main doesn't really exist in build-cd - we use vX branches as the default branch. Use conditional execution rather than on.<pull_request|push>.branches since we can't know the default branch then.

Update on.pull_request.branches to all, and do conditional execution of the first job for $default_branch