CI release workflow

[ianlewis]

• Build the Docker image and push to ghcr.io on release.
• Build the Dockerfile on push/pull_request to validate the Dockerfile.