fix: Dockerfile uses rust:1-bookworm, build mem-cli binary

.gitea/workflows/build.yaml

@@ -32,16 +32,10 @@ jobs:
         run: cargo check -p mem-ingest 2>&1 | tail -20 || true
 
       - name: Get short SHA
+        if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
         id: sha
         run: echo "short_sha=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
 
-      - name: Build Docker image
-        run: |
-          docker build --no-cache \
-            -t "${IMAGE}:${{ steps.sha.outputs.short_sha }}" \
-            -t "${IMAGE}:latest" \
-            -f Dockerfile .
-
       - name: Registry login
         if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
         run: |
@@ -51,6 +45,14 @@ jobs:
           REGISTRY_USER: ${{ secrets.FORGEJO_REGISTRY_USER }}
           REGISTRY_TOKEN: ${{ secrets.FORGEJO_REGISTRY_TOKEN }}
 
+      - name: Build Docker image
+        if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
+        run: |
+          docker build --no-cache \
+            -t "${IMAGE}:${{ steps.sha.outputs.short_sha }}" \
+            -t "${IMAGE}:latest" \
+            -f Dockerfile .
+
       - name: Push Docker image
         if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
         run: |