ci: only run heavy workflows when related paths change

Add path filters to workflows that fired on every PR/push regardless
of the diff: CodeQL, go build, the e2e/EC/vacuum/TLS/plugin-worker
integration suites, the Kafka and Postgres gateways, the S3 suites
(Ceph s3tests, s3-go, s3-tables, proxy-signature, https, example,
filer-group), TUS, and the dev binary/container builds. Each scopes
to its subsystem under weed/, its test dir, go.mod/go.sum, and the
workflow file, so docs-, helm-, terraform-, rust- or java-only
changes no longer trigger a full compile-and-test fleet.

.github/workflows/test-s3-over-https-using-awscli.yml

@@ -3,8 +3,20 @@ name: "test s3 over https using aws-cli"
 on:
   push:
     branches: [master, test-https-s3-awscli]
+    paths:
+      - 'weed/s3api/**'
+      - 'weed/server/**'
+      - 'go.mod'
+      - 'go.sum'
+      - '.github/workflows/test-s3-over-https-using-awscli.yml'
   pull_request:
     branches: [master, test-https-s3-awscli]
+    paths:
+      - 'weed/s3api/**'
+      - 'weed/server/**'
+      - 'go.mod'
+      - 'go.sum'
+      - '.github/workflows/test-s3-over-https-using-awscli.yml'
 
 env:
   AWS_ACCESS_KEY_ID: some_access_key1