feat: implement centralized Docker base-image strategy and automate registry pushes

.gitea/workflows/pipeline.yml

@@ -80,3 +80,41 @@ jobs:
           echo "🏷️ Tag detected [${{ github.ref_name }}], performing sync release..."
           pnpm sync-versions
           pnpm release:tag
+
+  build-images:
+    name: 🐳 Build & Push Images
+    needs: qa
+    if: startsWith(github.ref, 'refs/tags/v')
+    runs-on: docker
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: 🐳 Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: 🔐 Registry Login
+        run: |
+          echo "${{ secrets.REGISTRY_PASS }}" | docker login registry.infra.mintel.me -u "${{ secrets.REGISTRY_USER }}" --password-stdin
+
+      - name: 🏗️ Build & Push Nextjs Base
+        env:
+          TAG: ${{ github.ref_name }}
+        run: |
+          docker buildx build \
+            --platform linux/amd64,linux/arm64 \
+            -t registry.infra.mintel.me/mintel/nextjs:$TAG \
+            -t registry.infra.mintel.me/mintel/nextjs:latest \
+            -f packages/infra/docker/Dockerfile.nextjs \
+            --push .
+
+      - name: 🏗️ Build & Push Gatekeeper
+        env:
+          TAG: ${{ github.ref_name }}
+        run: |
+          docker buildx build \
+            --platform linux/amd64,linux/arm64 \
+            -t registry.infra.mintel.me/mintel/gatekeeper:$TAG \
+            -t registry.infra.mintel.me/mintel/gatekeeper:latest \
+            -f packages/infra/docker/Dockerfile.gatekeeper \
+            --push .