- Add test job (build + run tests)
- build-push now needs: [test]
- Remove type=raw,value=latest tag
- Keep type=raw,value=$TAG-latest for the latest versioned tag
- Remove docker/login-action, docker/metadata-action, docker/build-push-action
- Rename build-push to build (just docker build, no push)
- Tag job now depends on build
- Push to DockerHub is handled solely by tag.yaml now