More granular targeting for GitHub Actions

[super-cooper]

Is your feature request related to a problem? Please describe.
Our GitHub Actions run all the time on pull requests and merges. They should really only run when necessary to speed up scans.

Describe the solution you'd like
Add some file globs to the workflow triggers so they only run when appropriate

Additional context
https://docs.github.com/en/actions/using-workflows/triggering-a-workflow#using-filters-to-target-specific-paths-for-pull-request-or-push-events