fix: restrict push branches in workflows to only main

.github/workflows/codeql.yml

@@ -4,7 +4,7 @@ on:
   pull_request:
     branches: [main, nightly, development]
   push:
-    branches: [main, nightly, development, 'feature/**', 'fix/**']
+    branches: [main]
   workflow_dispatch:
   schedule:
     - cron: '0 3 * * 1' # Mondays 03:00 UTC

.github/workflows/docker-build.yml

@@ -23,6 +23,7 @@ name: Docker Build, Publish & Test
 on:
   pull_request:
   push:
+    branches: [main]
   workflow_dispatch:
   workflow_run:
     workflows: ["Docker Lint"]

.github/workflows/security-pr.yml

@@ -15,6 +15,7 @@ on:
         type: string
   pull_request:
   push:
+    branches: [main]
 
 
 concurrency: