Replace artifact upload/download with direct build per job. Trigger on tag push (v*). Chain: hadolint→test→build-push.