fix: restrict Docker latest tag to releases only

- Latest tag now only applied on git tag releases (refs/tags/v*)
- Removes latest tag from main branch pushes to prevent confusion
- Semantic version tags also restricted to releases only
- Main tag still available for both releases and main branch pushes

This ensures the latest tag always points to the most recent stable release
rather than development commits on main branch.

Author: JohanDevl

.github/workflows/docker-build.yml

@@ -81,12 +81,12 @@ jobs:
             ${{ env.REGISTRY_IMAGE }}
             ${{ env.GITHUB_IMAGE }}
           tags: |
-            # Latest tag - for git tags (semantic versions) AND main branch pushes
-            type=raw,value=latest,enable=${{ startsWith(github.ref, 'refs/tags/v') || github.ref == 'refs/heads/main' }}
+            # Latest tag - ONLY for git tags (semantic versions/releases)
+            type=raw,value=latest,enable=${{ startsWith(github.ref, 'refs/tags/v') }}
             # Main tag - for git tags (semantic versions) AND main branch pushes
             type=raw,value=main,enable=${{ startsWith(github.ref, 'refs/tags/v') || github.ref == 'refs/heads/main' }}
-            # Semantic version tag - for git tags AND main branch pushes (using latest tag)
-            type=raw,value=${{ steps.version.outputs.version }},enable=${{ startsWith(github.ref, 'refs/tags/v') || github.ref == 'refs/heads/main' }}
+            # Semantic version tag - ONLY for git tags (releases)
+            type=raw,value=${{ steps.version.outputs.version }},enable=${{ startsWith(github.ref, 'refs/tags/v') }}
             # Develop branch tag
             type=raw,value=develop,enable=${{ github.ref == 'refs/heads/develop' }}
             # PR tags