- current workflow does it all - split workflow in two (build + deploy), with the deploy part conditional on push to main.