[ci] reorganize jobs

We deploy first to make changes available fast. It makes no sense to
wait until the checks succeeded before deploying, because the deployment
process synchronizes all branches: another pipeline (for another branch)
could trigger the deployment of the current branch if it is broken.