ci: only enforce Go checks for pushes to `main` branch

Otherwise would create duplicated GitHub Checks.

.github/workflows/go.yml

@@ -1,6 +1,7 @@
 name: Go
 on:
   push:
+    branches: [main]
     paths:
       - '**.go'
   pull_request: