Only build and publish container images for the sync that's impacted by a change

Currently, the GitHub Action runs for _every_ sync in the repo no matter the change (on PRs and merges into `main`). We should be able to make this more efficient - to only run the build+publish workflow for syncs that are impacted by a change.