- Replaces workflow_run trigger with release.published
- Builds Docker image only when semantic-release publishes a new tag
- Tags image with immutable version and either :latest or :dev based on stability
- Removes unnecessary artifact dependencies and fallback tag logic