CI: build-once pipeline, deploy IFT after CI with conditional aux images.

Co-authored-by: Cursor <cursoragent@cursor.com>

.gitea/workflows/ci.yml

@@ -13,6 +13,7 @@ concurrency:
 env:
   BUILDKIT_PROGRESS: quiet
   DOCKER_BUILDKIT: 1
+  REGISTRY: git.sabilin.com/eventhub
 
 jobs:
   test:
@@ -46,3 +47,21 @@ jobs:
 
       - name: Run API tests (local CT)
         run: docker run --rm eventhub-api-tests:latest
+
+      - name: Login to registry
+        if: github.event_name == 'push'
+        uses: docker/login-action@v2
+        with:
+          registry: git.sabilin.com
+          username: ${{ secrets.REGISTRY_USER }}
+          password: ${{ secrets.REGISTRY_PASSWORD }}
+
+      - name: Push tested eventhub image
+        if: github.event_name == 'push'
+        run: |
+          set -euo pipefail
+          TAG="sha-${GITHUB_SHA:0:12}"
+          docker tag eventhub:latest "${REGISTRY}/eventhub:${TAG}"
+          docker tag eventhub:latest "${REGISTRY}/eventhub:ift"
+          docker push "${REGISTRY}/eventhub:${TAG}"
+          docker push "${REGISTRY}/eventhub:ift"