[nobug] Add some CI love

Build + deploy when master branch is pushed to mozilla/thunderhug w/ a tag
I'd remove this bit here; you want testing on every branch, right?