ci: Add a new pipeline for release image to ghcr.io using docker buildx

[tuananh]

• Add a new pipeline for release image to ghcr.io using docker buildx, trigger on new tag.
• sign & verify test included in the release pipeline https://github.com/tuananh/pizza/actions/runs/5430546048/jobs/9876365797

decisions need to be made:

• chainguard images are only linux/amd64 and linux/arm64. so if we want to add darwin/arm64 , linux/armv7 (32bit), we need to consider other base image. I tested with scratch for now but I dont know pizza's requirements (ssl needed?) so maybe someone can chime in here?

I tested build for 4 arch and here is the result https://github.com/tuananh/pizza/pkgs/container/pizza/106129540?tag=v0.1.0-rc4

What type of PR is this? (check all applicable)

• [x] 🍕 Feature
• [ ] 🐛 Bug Fix
• [ ] 📝 Documentation Update
• [ ] 🎨 Style
• [ ] 🧑‍💻 Code Refactor
• [ ] 🔥 Performance Improvements
• [ ] ✅ Test
• [x] 🤖 Build
• [x] 🔁 CI
• [ ] 📦 Chore (Release)
• [ ] ⏩ Revert

Description

Related Tickets & Documents

Mobile & Desktop Screenshots/Recordings

Added tests?

• [ ] 👍 yes
• [ ] 🙅 no, because they aren't needed
• [ ] 🙋 no, because I need help

Added to documentation?

• [ ] 📜 README.md
• [ ] 📓 docs.opensauced.pizza
• [ ] 🍕 dev.to/opensauced
• [ ] 📕 storybook
• [ ] 🙅 no documentation needed

[optional] Are there any post-deployment tasks we need to perform?

[optional] What gif best describes this PR or how it makes you feel?

[tuananh]

@jpmcb can you take a look?

[bdougie]

John is afk at the moment and will be slow to respond.

https://twitter.com/johncodezzz/status/1674834520753700868?s=46&t=BreY5j2K2SLZ6SHWpuPeEA

FWIW. I like what I see but defer to John until this service is marked for general adoption.

[tuananh]

Thanks. No big deal. This can wait :)

[jpmcb]

Just got back: this is amazing @tuananh - thanks so much for this contribution. I had thought of doing something similar so yes, this is definitely something we want. In depth review incoming.