ci: build docker image for dependency updates

This resolves a blind spot in PR tests without excessive builds

Author: vlaci

.github/workflows/build-publish-image.yml

@@ -1,6 +1,7 @@
 name: Build Docker image
 
 on:
+  pull_request:
   push:
     branches:
       - main
@@ -12,6 +13,7 @@ env:
 
 jobs:
   build-image:
+    if: github.event_name == 'push' || contains(github.event.*.labels.*.name, 'dependencies')
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false
@@ -109,7 +111,7 @@ jobs:
           retention-days: 1
 
   merge-and-push-image:
-    if: github.repository_owner == 'onekey-sec'
+    if: github.repository_owner == 'onekey-sec' && github.event_name == 'push'
     runs-on: ubuntu-latest
     needs:
       - build-image