The `Merge branch 'main'` commit (088cbf3) landed build-image.yml with
unresolved conflict markers. Resolved to main's "Release workflow
revision" design: build-image.yml now triggers on `v*` tags only and
always publishes, because test-image.yml owns the PR/main test builds
and never publishes. Keeping the old PR/main triggers here would have
double-built and is now redundant.
Verified: go vet, go test ./..., shellcheck, yamllint, make smoke all pass.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>