ci: add build-hash job on ubuntu-latest for IPFS hash comments on all PRs

Separates concerns:
- build-test: ipfs-dev-gateway, PR events only, verifies Docker build
- build-hash: ubuntu-latest, push to non-main branches, posts IPFS hash via Pinata
- release: ipfs-dev-gateway, push to main only

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: hcastc00

.github/workflows/main.yml

@@ -3,9 +3,6 @@ on:
   repository_dispatch:
   pull_request:
   push:
-    branches:
-      - "main"
-      - "v[0-9]+.[0-9]+.[0-9]+"
     paths-ignore:
       - "README.md"
 
@@ -21,10 +18,25 @@ jobs:
           node-version: "22"
       - run: npx @dappnode/dappnodesdk build --provider http://10.200.200.7:5001 --timeout 1h
 
+  build-hash:
+    runs-on: ubuntu-latest
+    name: Build and post IPFS hash
+    if: github.event_name == 'push' && github.ref != 'refs/heads/main'
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+      - run: npx @dappnode/dappnodesdk build github-action build --timeout 1h
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          PINATA_API_KEY: ${{ secrets.PINATA_API_KEY }}
+          PINATA_SECRET_API_KEY: ${{ secrets.PINATA_SECRET_API_KEY }}
+
   release:
     name: Release
     runs-on: ipfs-dev-gateway
-    if: github.event_name == 'push' || github.event_name == 'repository_dispatch'
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main' || github.event_name == 'repository_dispatch'
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4