Multi-stage build (golang:1.26 -> distroless/static-nonroot), CGO disabled, GOPRIVATE set for the kmsvc-proto module fetch.
riotpiaole