Add the release pipeline: build tasks, publisher, smoke wiring

[ptr727]

Summary

Second and final release-pipeline PR (issue #14 item 8), adapted from the fleet console+docker reference. Builds on the Dockerfile rework in #21.

New reusable workflows:

• get-version-task.yml - run NBGV once, expose SemVer2 / Assembly* / GitCommitId. NBGV is CI-side (version.json already present, no package reference), matching the fleet.
• build-executable-task.yml - dotnet publish over the runtime matrix (2 RIDs on smoke, 7 on release), threads the single NBGV version, zips into the release-asset-<branch>-executable artifact.
• build-docker-task.yml - buildx multi-arch (amd64+arm64 on main, amd64 on develop/smoke), registry buildcache (buildcache-<branch>), gated push, and the Docker Hub overview push on a main publish. Passes the BUILD_* args the reworked Dockerfile accepts.
• build-release-task.yml - orchestrator: validate -> get-version -> build-executable + build-docker -> github-release (collects release-asset-<branch>-* by pattern, pins the tag to GitCommitId, idempotent release-exists guard, main-only prerelease-suffix backstop). The validate call omits ref since this repo's validate-task takes none - a publish run's github.ref is already the trigger branch.
• publish-release.yml - entry-point publisher: weekly cron (main) + workflow_dispatch (either branch), global ref-independent concurrency, contents: write. Merges never publish.

Modified:

• test-pull-request.yml - adds a smoke-build job (build-release-task with smoke: true, no push) and includes it in the required Check pull request workflow status job aggregator's needs and result loop, so a PR now exercises the reusable build pipeline.

New:

• Docker/README.md - Docker Hub overview (reference-style links), landing with the scheduler its text describes.

Validation

• This PR's own CI is the real test: the new smoke-build job runs build-release-task -> the executable build (linux-x64 + win-x64) and the amd64 Docker build (no push) through the new reusable chain.
• actionlint (all workflows, local reusable refs resolve), markdownlint, editorconfig-checker: clean.
• The two underlying build commands were validated locally (dotnet publish --runtime linux-x64; docker buildx build linux/amd64).

Notes

• Publish paths are not exercised by CI (smoke is push: false); the first real publish is a maintainer workflow_dispatch of publish-release.yml. Docker Hub secrets are provisioned in both stores; the ptr727/photocleaner Docker Hub repo should exist before the first push.
• merge-bot and the release-pipeline's remaining niceties (date badge) are out of item-8 scope.

🤖 Generated with Claude Code

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 44.96%. Comparing base (ab23a1b) to head (fb6f16e).

Additional details and impacted files

@@ Coverage Diff @@## develop #22 +/- ##
========================================
Coverage 44.96% 44.96% ========================================
Files 25 25 Lines 3398 3398 Branches 259 259 ========================================
Hits 1528 1528 Misses 1824 1824 Partials 46 46 

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Copilot]

Pull request overview

Adds the repo’s release pipeline as reusable GitHub Actions workflows, plus an entry-point publisher workflow, and wires a “smoke” build into the push-based PR gate so proposed changes exercise the reusable build chain without publishing.

Changes:

• Introduces reusable workflows to compute versioning (NBGV), build runtime-matrix executables, build Docker images (with caching and optional push), and orchestrate GitHub Releases.
• Adds publish-release.yml as the scheduled/manual publisher that calls the reusable release orchestrator.
• Updates the push-based PR gate workflow to run a non-publishing “smoke” build, and adds a Docker Hub overview README.

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
Docker/README.md	Adds the Docker Hub overview content and reference-style links.
.github/workflows/test-pull-request.yml	Adds a smoke build job and includes it in the required-status aggregator gate.
.github/workflows/publish-release.yml	Adds the scheduled/manual publisher entry-point workflow.
.github/workflows/get-version-task.yml	Adds a reusable NBGV versioning workflow with outputs for downstream jobs.
.github/workflows/build-release-task.yml	Adds the reusable release orchestrator (validate -> version -> build -> GitHub release).
.github/workflows/build-executable-task.yml	Adds the reusable runtime-matrix executable build and release-asset artifact packaging.
.github/workflows/build-docker-task.yml	Adds the reusable Docker buildx workflow (platform matrix, caching, optional push, Docker Hub README update).

Comments suppressed due to low confidence (1)

.github/workflows/build-release-task.yml:130

• Per AGENTS.md:215, multi-line bash run blocks should start with set -Eeuo pipefail (including -E). This block currently uses set -euo pipefail.

 run: |
set -euo pipefail
if gh release view "$TAG" --repo "$GITHUB_REPOSITORY" >/dev/null 2>&1; then

[Copilot]

Pull request overview

Copilot reviewed 8 out of 8 changed files in this pull request and generated 3 comments.

[Copilot]

Pull request overview

Copilot reviewed 8 out of 8 changed files in this pull request and generated no new comments.