fix: GitHub Actions workflow permissions and Docker publishing

- Add explicit token parameter to release-please action to fix PR creation permissions
- Add missing environment variables (GITHUB_ACTOR, CI) for Docker registry authentication
- Add Docker buildx setup steps to release workflow
- Move GITHUB_TOKEN to step-level environment in publish workflow

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <[email protected]>

Author: johnnyhuy

.github/workflows/publish-latest-image.yaml

@@ -21,9 +21,6 @@ jobs:
       matrix:
         arch: [linux/amd64, linux/arm64]
 
-    env:
-      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
     steps:
       - uses: actions/checkout@v4
         with:
@@ -32,4 +29,7 @@ jobs:
       - uses: docker/setup-buildx-action@v3
       - run: make publish-image
         env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_ACTOR: ${{ github.actor }}
+          CI: true
           DOCKER_DEFAULT_PLATFORM: ${{ matrix.arch }}

.github/workflows/release-please.yaml

@@ -21,6 +21,7 @@ jobs:
         id: release
         with:
           release-type: python
+          token: ${{ secrets.GITHUB_TOKEN }}
 
   publish-pypi:
     needs: release-please
@@ -44,9 +45,15 @@ jobs:
         arch: [linux/amd64, linux/arm64]
     steps:
       - uses: actions/checkout@v4
+        with:
+          fetch-tags: true
       - uses: asdf-vm/actions/install@v4
+      - uses: docker/setup-qemu-action@v3
+      - uses: docker/setup-buildx-action@v3
       - name: Publish Docker Image
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_ACTOR: ${{ github.actor }}
+          CI: true
           DOCKER_DEFAULT_PLATFORM: ${{ matrix.arch }}
         run: make publish-image