ci: use path allow list for iceberg workflow triggers

Switch the iceberg_spark_test.yml push and pull_request triggers from
paths-ignore (deny list) to paths (allow list), so the workflow runs
only when files that actually affect iceberg tests change.

With a deny list, every new file type that should not trigger iceberg
CI must be added explicitly. An allow list excludes everything by
default, so unrelated changes such as dev/ scripts, release tooling,
and golden-file regeneration no longer trigger iceberg CI.

The allow list mirrors spark_sql_test.yml, scoped to dev/diffs/iceberg
and the iceberg-specific workflow and setup action.

Author: andygrove

.github/workflows/iceberg_spark_test.yml

@@ -25,27 +25,41 @@ on:
   push:
     branches:
       - main
-    paths-ignore:
-      - "benchmarks/**"
-      - "doc/**"
-      - "docs/**"
-      - "**.md"
-      - "native/core/benches/**"
-      - "native/spark-expr/benches/**"
-      - "spark/src/test/**"
-      - "spark/src/main/scala/org/apache/comet/GenerateDocs.scala"
-      - "spark-integration/**"
+    paths:
+      - "native/**/src/**"
+      - "native/**/Cargo.toml"
+      - "native/Cargo.lock"
+      - "!native/hdfs/**"
+      - "!native/fs-hdfs/**"
+      - "common/src/main/**"
+      - "common/pom.xml"
+      - "spark/src/main/**"
+      - "!spark/src/main/scala/org/apache/comet/GenerateDocs.scala"
+      - "spark/pom.xml"
+      - "dev/diffs/iceberg/**"
+      - "pom.xml"
+      - "rust-toolchain.toml"
+      - ".github/workflows/iceberg_spark_test.yml"
+      - ".github/actions/setup-builder/**"
+      - ".github/actions/setup-iceberg-builder/**"
   pull_request:
-    paths-ignore:
-      - "benchmarks/**"
-      - "doc/**"
-      - "docs/**"
-      - "**.md"
-      - "native/core/benches/**"
-      - "native/spark-expr/benches/**"
-      - "spark/src/test/**"
-      - "spark/src/main/scala/org/apache/comet/GenerateDocs.scala"
-      - "spark-integration/**"
+    paths:
+      - "native/**/src/**"
+      - "native/**/Cargo.toml"
+      - "native/Cargo.lock"
+      - "!native/hdfs/**"
+      - "!native/fs-hdfs/**"
+      - "common/src/main/**"
+      - "common/pom.xml"
+      - "spark/src/main/**"
+      - "!spark/src/main/scala/org/apache/comet/GenerateDocs.scala"
+      - "spark/pom.xml"
+      - "dev/diffs/iceberg/**"
+      - "pom.xml"
+      - "rust-toolchain.toml"
+      - ".github/workflows/iceberg_spark_test.yml"
+      - ".github/actions/setup-builder/**"
+      - ".github/actions/setup-iceberg-builder/**"
   # manual trigger
   # https://docs.github.com/en/actions/managing-workflow-runs/manually-running-a-workflow
   workflow_dispatch: