fix: add annotations to Docker workflow

[caycehouse]

Labels were added a while back to the docker image, but since the image is being built for multiple architectures, annotations need to be set in order for tools like renovate to pick up the OCI metadata.

https://docs.github.com/en/packages/working-with-a-github-packages-registry/working-with-the-container-registry#labelling-container-images

Checks

• I am happy for maintainers to push small adjustments to this PR, to speed up the review cycle
• I have checked that there are no existing pull requests for the same thing

[github-actions]

Fossier: Manual Review Requested

@caycehouse is a new contributor. A maintainer should review this PR before merging.

Score Breakdown

Total Score: 65.7/100 | Confidence: 100% | Outcome: REVIEW

Signal	Value	Score	Weight
account_age	5194	1.00	0.09
public_repos	30	1.00	0.05
contribution_history	38	0.19	0.05
follower_ratio	2.33	1.00	0.05
bot_signals	False	0.50	0.04
open_prs_elsewhere	1	0.88	0.09
closed_prs_elsewhere	13	0.00	0.10
merged_prs_elsewhere	223	1.00	0.08
prior_interaction	0	0.00	0.08
activity_velocity	1	1.00	0.08
pr_content	...	0.70	0.08
commit_email	cayce@caycehouse.com	0.80	0.04
pr_description	...	0.80	0.05
repo_stars	29834	0.30	0.04
org_membership	0	0.20	0.03
commit_verification	...	1.00	0.04
contributor_stars	41	0.82	0.04

[greptile-apps]

Greptile Summary

This PR adds Docker image annotations to the publish workflow. The main change is:

• Pass docker/metadata-action annotation output into the Depot build/push step.

Confidence Score: 4/5

This is close, but the annotation target should be fixed before merging.

• The workflow now forwards annotations to the build step.

• The metadata action defaults those annotations to manifests only.

• The multi-arch image index can remain unannotated, so consumers may still miss the OCI metadata.

• .github/workflows/docker.yaml should configure annotation levels for the metadata step.

Important Files Changed

Filename	Overview
.github/workflows/docker.yaml	Adds annotation forwarding to the multi-arch Docker image build.

Comments Outside Diff (1)

1. .github/workflows/docker.yaml, line 36-47 (link)

   Annotate the index This workflow builds a multi-arch image, which creates an image index. docker/metadata-action puts generated annotations on manifests by default, so passing steps.meta.outputs.annotations here can still leave the top-level index without OCI metadata. Tools that read metadata from the multi-arch index, such as Renovate, may continue to miss the source/version annotations this PR is trying to expose.

_{Reviews (1): Last reviewed commit: "Add annotations to Docker workflow" | Re-trigger Greptile}