Only notarize tagged releases

Author: johnboiles

.github/workflows/build.yml

@@ -49,7 +49,7 @@ jobs:
           ditto -c -k --sequesterRsrc --keepParent "$APP_PATH" "$PWD/build/QuickLookStep.zip"
 
       - name: Notarize
-        if: github.event_name != 'pull_request'
+        if: startsWith(github.ref, 'refs/tags/release/v')
         env:
           APPSTORE_CONNECT_API_KEY_ID: ${{ secrets.APPSTORE_CONNECT_API_KEY_ID }}
           APPSTORE_CONNECT_API_ISSUER_ID: ${{ secrets.APPSTORE_CONNECT_API_ISSUER_ID }}
@@ -64,7 +64,7 @@ jobs:
             --wait
 
       - name: Staple
-        if: github.event_name != 'pull_request'
+        if: startsWith(github.ref, 'refs/tags/release/v')
         run: |
           APP_PATH="$PWD/build/QuickLookStep.xcarchive/Products/Applications/QuickLookStep.app"
           xcrun stapler staple "$APP_PATH"