ci:avoid dependbot trigger reduant push event

[luoliwoshang]

fix follow

---

Dependabot PRs trigger both push and pull_request events, causing workflows to run twice. See duplicate runs in luoliwoshang#170. This excludes Dependabot branches from push triggers while keeping pull_request triggers intact.

you can see the result at https://github.com/luoliwoshang/llgo/pull/172，with the dependabot will only trigger the pr action

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.28%. Comparing base (6588f36) to head (82ed846).
⚠️ Report is 42 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1269   +/-   ##
=======================================
  Coverage   90.28%   90.28%           
=======================================
  Files          40       40           
  Lines       11704    11704           
=======================================
  Hits        10567    10567           
  Misses       1010     1010           
  Partials      127      127           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.