gci: Limit PyPI publication to pull request merged and version tags

.github/workflows/pypi.yml

@@ -1,6 +1,10 @@
 ---
 name: Publish Python 🐍 distributions 📦 to PyPI and TestPyPI
-on: push
+on:
+  # Only deploy if we're the result of a PR being merged
+  push:
+    branches:
+      - master
 jobs:
   deploy:
     name: Build and publish ${{ matrix.package }} 🐍
@@ -46,6 +50,7 @@ jobs:
         python -m build --sdist --wheel --outdir dist/ .
 
     - name: Publish distribution 📦 to Test PyPI
+      if: github.repository == ‘ElementsProject/lightning’
       uses: pypa/gh-action-pypi-publish@master
       env:
         WORKDIR: ${{ matrix.WORKDIR }}
@@ -56,7 +61,7 @@ jobs:
         skip_existing: true
 
     - name: Publish distribution 📦 to PyPI
-      if: startsWith(github.ref, 'refs/tags')
+      if: startsWith(github.ref, 'refs/tags') && github.repository == ‘ElementsProject/lightning’
       uses: pypa/gh-action-pypi-publish@master
       env:
         WORKDIR: ${{ matrix.WORKDIR }}