Add workflow rules to support MR pipelines

GitLab requires MR pipelines to pass before merging, but the CI config
didn't define any workflow rules. This caused empty MR pipelines that
failed immediately.

🤖 Generated with [Claude Code](https://claude.com/claude-code

)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>