This adds a top-level `workflow:rules` to define
a prescripted workflow for CI.

We disable all other usage patterns for pipelines
that are not MR, master, stable, and tags.
Signed-off-by: Rémy Coutable <remy@rymai.me>