This enables full semgrep scans on develop while retaining
incremental scans on PR branches. This should help with the
baseline stats + showing fixed commits.
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>