Never trigger pipelines on tags

The rework of rules in the recent "Build sources only once" commit causes the build-source job to be triggered when pushing tags.

Add a global workflow rule to completely avoid triggering pipelines on tags in any case.