fix: don't trigger the workflow in pull_request_target and push event

[soul2zimate]

Description

follow up on #207

• fix: don't trigger the workflow in pull_request_target and push event
• fix: add missing gpg argument

Checklist

• I have followed this repository's contributing guidelines.
• I will adhere to the project's code of conduct.

[soul2zimate]

Hi @ruromero Could you review and merge this ? I forgot to remove obsolete events which trigger the release workflow.

Also, I see this gpg signing problem from an accidental run after I merged #207. I am not sure if this relates to the missing gpg argument --batch in pom.xml, so I just added that argument to the gpg-sign profile

gpg: signing failed: No pinentry
gpg: signing failed: No pinentry
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------

https://github.com/guacsec/trustify-da-java-client/actions/runs/19450538178/job/55654219048