fix: restrict latest/main tags to semantic version tags only

- Change Docker tagging strategy to only apply latest/main tags on Git tag pushes
- Prevent develop branch pushes from overriding latest tag
- Ensure latest tag always points to the most recent semantic version release
- Maintain develop tag exclusively for develop branch builds

This ensures latest tag remains on the stable main branch versions only.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: JohanDevl

.github/workflows/docker-build.yml

@@ -80,10 +80,12 @@ jobs:
             ${{ env.REGISTRY_IMAGE }}
             ${{ env.GITHUB_IMAGE }}
           tags: |
-            # Main branch tags (manual or tag-triggered)
-            type=raw,value=latest,enable=${{ github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/') }}
-            type=raw,value=main,enable=${{ github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/') }}
-            type=raw,value=${{ steps.version.outputs.version }},enable=${{ github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/') }}
+            # Latest tag - ONLY for git tags (semantic versions)
+            type=raw,value=latest,enable=${{ startsWith(github.ref, 'refs/tags/v') }}
+            # Main tag - ONLY for git tags (semantic versions)
+            type=raw,value=main,enable=${{ startsWith(github.ref, 'refs/tags/v') }}
+            # Semantic version tag - ONLY for git tags
+            type=raw,value=${{ steps.version.outputs.version }},enable=${{ startsWith(github.ref, 'refs/tags/v') }}
             # Develop branch tag
             type=raw,value=develop,enable=${{ github.ref == 'refs/heads/develop' }}
             # PR tags