fix: only run hooks on tag push to main

.github/workflows/python-publish.yml

@@ -9,6 +9,9 @@
 name: Upload Python Package
 
 on:
+  push:
+    branches:
+      - "main"
   release:
     types: [published]
 
@@ -17,8 +20,8 @@ permissions:
 
 jobs:
   release-build:
+    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
     runs-on: ubuntu-latest
-
     steps:
       - uses: actions/checkout@v4
 
@@ -39,6 +42,7 @@ jobs:
           path: dist/
 
   pypi-publish:
+    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
     runs-on: ubuntu-latest
     timeout-minutes: 5
     needs: