V6.3 — Publish stable Docker images to GHCR

[garniergeorges]

Goal

agent-forge/base:1.0.0 and dérivés are published on GitHub Container Registry.

Tasks

• CI builds and pushes images on tag push
• Multi-arch (amd64 + arm64)
• Image scanning (trivy)
• Image signing (cosign)