Consider triggers per commit

Instead of triggering the CI based on all changes in a PR, we could trigger based on changes in a single commit. By setting path triggers for any branch name but restricting to (a) `main` and (b) branches with an open PR, we would be able to get finer-grained control over what runs.

The downside is that the full test suite wouldn't necessarily have run on the last commit to the PR.