- Run on all branches and PRs (build-only, no push)
- Push to registry only on main and version tags (v*)
- main branch: tag as :main, :latest, :<sha>
- version tags (v*): tag as :<tag>, :latest, :<sha>
- Use gitea context vars (gitea.sha, gitea.ref, gitea.ref_name, gitea.repository)