fix: broken Docker tags builds

Also, stops renovate running when Semantic Releaser pushes directly to
main branch, as this has the affect of making it appear that the main
branch is broken, when it's not.