ci: add Docker build to release pipeline, drop PyPI

- Add Docker job: builds and pushes to ghcr.io on release
- Tags: latest + version (e.g., ghcr.io/sheeki03/schrute:0.1.0)
- Uses GitHub Actions cache for layer reuse
- Remove PyPI publish job (deferred for now)
- Release job now waits on docker build before creating release

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: sheeki03

.github/workflows/release.yml

@@ -7,6 +7,7 @@ on:
 
 permissions:
   contents: write
+  packages: write
 
 jobs:
   # ─── npm publish ─────────────────────────────────────────────────
@@ -24,6 +25,41 @@ jobs:
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
+  # ─── Docker → GitHub Container Registry ────────────────────────
+  docker:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+      - run: npm ci
+      - run: npm run build
+
+      - uses: docker/setup-buildx-action@v3
+
+      - uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract version from tag
+        id: version
+        env:
+          TAG_NAME: ${{ github.ref_name }}
+        run: echo "version=${TAG_NAME#v}" >> "$GITHUB_OUTPUT"
+
+      - uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: true
+          tags: |
+            ghcr.io/${{ github.repository }}:latest
+            ghcr.io/${{ github.repository }}:${{ steps.version.outputs.version }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
   # ─── Standalone binaries → GitHub Releases ───────────────────────
   binary:
     strategy:
@@ -61,7 +97,7 @@ jobs:
 
   # ─── Create GitHub Release with binaries ─────────────────────────
   release:
-    needs: [npm, binary]
+    needs: [npm, binary, docker]
     runs-on: ubuntu-latest
     steps:
       - uses: actions/download-artifact@v4
@@ -76,21 +112,6 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-  # ─── Python SDK → PyPI via uv ───────────────────────────────────
-  pypi:
-    needs: [npm]
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: astral-sh/setup-uv@v4
-      - name: Build and publish Python SDK
-        working-directory: src/client/python
-        run: |
-          uv build
-          uv publish
-        env:
-          UV_PUBLISH_TOKEN: ${{ secrets.PYPI_TOKEN }}
-
   # ─── Homebrew tap update ─────────────────────────────────────────
   homebrew:
     needs: [npm]