Lucas Berger ebcc38d810 feat(08-04): publish job — build + push API image on merge to main ...

- Add publish job gated on push to refs/heads/main (never pull_request)
- docker login via --password-stdin with secrets.GITEA_REGISTRY_PAT (Pitfall 13)
- docker build --target production -f apps/api/Dockerfile . (repo-root context, T-08-10)
- Push :latest and :${MILESTONE}-${SHORT_SHA} tags per D-04
- docker logout in always() step to drop credential after push
- No dev-bypass flag in publish job (T-08-09 boundary)

2026-06-11 15:56:37 -04:00

..

ci.yml

feat(08-04): publish job — build + push API image on merge to main

2026-06-11 15:56:37 -04:00

runner-probe.yml

chore(08-01): probe to manual-only (workflow_dispatch)

2026-06-11 14:29:38 -04:00