fix: skip renovate-validate on semantic release pushes

We're already made this change for `renovate_bot` jobs: we need to do
the same for `renovate_validate` jobs for the same reason: the image
doesn't exist until after the tag pipeline is run.