عرض عملي: نشر صورة موسومة عند الدمج

خطوة بخطوة

1. Add a second workflow (or job) triggered by push to main.
2. Log in to ghcr.io with GITHUB_TOKEN and grant packages: write.
3. Build and push shop:<sha> and shop:latest or a version tag.
4. Enable branch protection with the build check required.
5. Planned mistake: print an environment variable that contains a secret with echo; show it masked, then explain why you still never print secrets.
6. Open a PR with a failing test and show it cannot merge.