ci(main): push latest tag on main commits, auto-deploy via kustomization

.gitea/workflows/build-prod.yaml

@@ -52,7 +52,10 @@ jobs:
             .
 
       - name: Push
-        run: docker push "${IMAGE}:${{ steps.sha.outputs.short_sha }}"
+        run: |
+          docker push "${IMAGE}:${{ steps.sha.outputs.short_sha }}"
+          docker tag "${IMAGE}:${{ steps.sha.outputs.short_sha }}" "${IMAGE}:latest"
+          docker push "${IMAGE}:latest"
 
       - name: Report digest
         run: |

k8s/kustomization.yaml

@@ -11,13 +11,11 @@ resources:
 - configmap.yaml
 
 # The deployed image tag lives here and nowhere else. CI publishes
-# forgejo.riotpiao.com/rock/api-gateway:<commit-sha>; promoting a build is a
+# forgejo.riotpiao.com/rock/api-gateway:<commit-sha> and tags it as :latest on main.
-# one-line commit bumping newTag, which Argo then syncs (G7).
+# ArgoCD auto-syncs when the latest image is available.
-#
-#   kustomize edit set image forgejo.riotpiao.com/rock/api-gateway=:<sha>
 images:
 - name: forgejo.riotpiao.com/rock/api-gateway
-  newTag: v0.1.1
+  newTag: latest
 
 commonLabels:
   app: api-gateway