Separate build and push in GitLab CI/CD Pipeline

We should trigger builds on MRs, but only push the final image after it has been merged to master.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information