ci: build and publish the dashboard image to GHCR

[RedStar071]

Add a multi-stage Dockerfile that builds apps/dashboard with the
self-hosted node preset and ships only the Nitro .output bundle, plus a
cd workflow modelled on wolfstar-project/.github's reusable publish
workflow: native amd64/arm64 builds pushed by digest, merged into one
manifest list on ghcr.io. The image listens on $PORT, so it runs on
Docker and Railway unchanged.

Co-Authored-By: Claude Opus 5.5 noreply@anthropic.com
Claude-Session: https://claude.ai/code/session_016Xv8HFiGBXf14HBy5yko6J

Confidence Score: 5/5

Safe to merge.

_{Reviews (4) · Last reviewed commit: "Merge branch 'main' into claude/dockerfi..."}

[coldtea-pr-lens]

◈ PR Lens

Note

The title starts with ci:, so PR Lens left this pull request undrawn. Comment @pr-lens draw to draw it

_{github.comment.notice: false in .github/pr-lens.yml turns this note off}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

2 Skipped Deployments

Project	Deployment	Actions	Updated
agent-zero-docs	Skipped		Sep 24, 2026 10:26am UTC
agent-zero-marketing	Skipped		Sep 24, 2026 10:26am UTC

[RedStar071]

CI is red for a reason outside this PR. Every job that installs dependencies (lint, typecheck, tests, build, knip, i18n, autofix) fails at aube ci with this error:

× failed to fetch https://pkg.pr.new/lunariajs/lunaria/@lunariajs/core@904b935: 404 Not Found

packages/i18n/package.json pins @lunariajs/core to that pkg.pr.new preview build, and the artifact has expired. The URL also returns 404 outside CI. main last passed on 2026-09-14, when the artifact still existed, so a fresh main run would now fail the same way. This PR doesn't touch that dependency.

No fix PR exists yet. A proposed patch, kept out of this PR because it rewrites the lockfile:

-    "@lunariajs/core": "https://pkg.pr.new/lunariajs/lunaria/@lunariajs/core@904b935",
+    "@lunariajs/core": "^0.2.0",

Then run aube install to regenerate pnpm-lock.yaml. Version 0.2.0 on npm exports the same createLunaria, getFullStatus and ./config API that lunaria.config.ts and scripts/i18n-status.ts use, and it also ships a CLI. With the patch, the install succeeds. I haven't yet verified typecheck or i18n:status against it.

---

Generated by Claude Code

[RedStar071]

Vercel – agent-zero-docs is red on 2918d13 because of a Turbo cache config gap, not this PR.

The docs build was a remote-cache hit (1 cached, 1 total … FULL TURBO). Its inputs match the build #70 just ran, because this PR doesn't touch apps/docs or docs/*.md. Vercel then failed with No Output Directory named "dist" found after the Build completed. On Vercel the Nuxt vercel preset writes .vercel/output/, but @code-zero/docs#build in turbo.jsonc only declares .output/**. So a cache hit restores nothing that Vercel can deploy. The dashboard and marketing tasks already list both directories for exactly this reason. Any branch whose docs inputs match an earlier Vercel build hits the same failure, main included.

No fix exists yet. Proposed patch, kept out of this PR because it's unrelated to the Docker/CD change:

     "@code-zero/docs#build": {
       …
-      "outputs": [".output/**"],
+      "outputs": [".output/**", ".vercel/output/**"],
     },

A re-run would hit the same cache entry, so I haven't triggered one. The GitHub Actions CI for this commit is unaffected.

---

Generated by Claude Code