ci: use `ruleset` subcomponents to avoid unneeded jobs

The `config` and `os` jobs in the `ruleset` components were redundant,
as we're already running `local` and `linux` in the `version` jobs. So
we've switched to using the subcomponents explicit to allow fine-grained
control of the jobs.

This has cut down the jobs we run from 8 to 4.