gitlab-ci: port version update pipeline logic to the single rules block

Additionally mark the version update job as never running on MRs
because it has side effects.

Co-authored-by: Brad King <brad.king@kitware.com>