Investigate adding an automatic build-and-push workflow for merges to `main`

[threexc]

We currently have to manually trigger a workflow after a PR tests a new workflow submission or a version upgrade for an existing one. It may be preferable to have this step automatically trigger as well, so that the only input required from maintainers is to approve and merge a PR.