ci: finalize integration delivery and retention (6/6)

[cerede2000]

Summary

PR 6/6, the final exact snapshot in the complete tested main → integration contribution train. Depends on #224.

• ignores redundant file-browser navigation, including repeated Home clicks;
• publishes immutable integration image tags alongside stable tags;
• retains the three latest reachable integration builds;
• removes stale SHA-only GHCR versions while preserving manifests, architectures, signatures, SBOM and provenance children.

Exact coverage proof

This branch and cerede2000/dockman:integration have the identical Git tree:

cc635694de1b3ff48e0efebb4121addab792d51a

The six-PR train therefore accounts for 100% of the file-level delta from current upstream main to the tested integration branch.

Validation

• dedicated Go/build/vet/test, vulnerability and frontend workflow: https://github.com/cerede2000/dockman/actions/runs/29796718963
• clean multi-architecture integration rebuild: https://github.com/cerede2000/dockman/actions/runs/29780717894
• full integration checks: https://github.com/cerede2000/dockman/actions/runs/29780725499
• local frontend lint/build and exact-tree comparison: passed

Series mechanics

This is cumulative until PRs 1–5 merge, then it will be rebased onto updated upstream main, leaving only this final delivery lot.

[vercel]

Someone is attempting to deploy a commit to the r334's projects Team on Vercel.

A member of the Team first needs to authorize it.