Configure merge-request pipelines

This MR configures the pipelines to run in merge requests, so that pipelines run in the parent namespace, so that container scanning doesn't get horribly confused.