[CI] Only deploy to prod/staging if all tests pass

Currently, the test jobs and the deploy run in parallel, so there is a possibility that we deploy buggy code. It shouldn't happen as the tests need to pass before a PR is merged (there is the option to bypass the checks, though) but it is good to make that dependency explicit.