Make sure GitLab CI only deploys master branch
the SSH key and SSH host are protected variables now that anyone can make a merge request for the website. We don't want those people to be able to drag our private key out of GitLab by forging their MR in the right way. Protected variables can only be used on protected branches (master in this case).