CI: run on pull requests as well, not just pushes.