Use `workflow:rules:` for `.gitlab-ci.yml`

This adds a top-level `workflow:rules` to define
a prescripted workflow for CI.

We disable all other usage patterns for pipelines
that are not MR, master, stable, and tags.

Signed-off-by: Rémy Coutable <remy@rymai.me>