also don't bother upload to av scan, if not published

.github/workflows/win-exe.yml

@@ -377,7 +377,7 @@ jobs:
 
   allowlist:
     name: Anti Virus Allowlisting
-    if: startsWith(github.ref, 'refs/tags/')
+    if: startsWith(github.ref, 'refs/tags/') && github.event_name == 'published'
     runs-on: ubuntu-latest
     needs: [build-msi, build-exe]
     steps: