Add docker workflow

[dianab-cl]

No description provided.

[linear-code]

FOU-1343

[greptile-apps]

Greptile Summary

The PR adds a multi-architecture GitHub Actions workflow for building and publishing Docker images and makes the container’s default command overridable.

• Builds amd64 and arm64 images, uploads their digests, and publishes a combined manifest.
• Supports manual ref selection and optional PKCS#11 dependencies.
• Pins third-party actions to immutable commit SHAs.
• Sanitizes and validates image tags while reserving latest for main-branch pushes.
• Splits the Docker image’s entrypoint and default arguments.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

Important Files Changed

Filename	Overview
.github/workflows/docker.yaml	Adds a pinned, multi-platform image publication workflow with digest merging and validated tag selection; the previously reported workflow issues are resolved.
Dockerfile	Separates the executable entrypoint from its default arguments so callers can override the container command without replacing the executable.

Sequence Diagram

sequenceDiagram
  participant E as GitHub Event
  participant B as Platform Build Jobs
  participant R as GHCR
  participant A as Digest Artifacts
  participant M as Manifest Job
  E->>B: Trigger amd64 and arm64 builds
  B->>R: Push images by digest
  B->>A: Upload digest markers
  A->>M: Download platform digests
  M->>M: Sanitize and validate tag
  M->>R: Publish multi-platform manifest
  M->>R: Inspect published manifest

Loading

_{Reviews (2): Last reviewed commit: "After code review" | Re-trigger Greptile}

[dianab-cl]

@greptile review