ci: run all checks and tests directly inside container build and push immediately

.gitea/workflows/build-and-publish.yaml

@@ -8,40 +8,8 @@ on:
       - '*'
 
 jobs:
-  test:
-    name: Lint, Build & Unit Tests
-    runs-on: ubuntu-latest
-    if: github.ref != 'refs/heads/main'
-    steps:
-      - name: Checkout Code
-        uses: actions/checkout@v4
-
-      - name: Setup Go
-        uses: actions/setup-go@v5
-        with:
-          go-version: '1.23'
-
-      - name: Run Backend Lint & Unit Tests
-        run: |
-          go mod tidy
-          go vet ./...
-          go test -v ./...
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: '22'
-
-      - name: Typecheck & Build Frontend
-        run: |
-          cd frontend
-          npm install --no-audit --no-fund
-          npx tsc --noEmit
-          npm run build
-
-  build-docker:
-    name: Build & Push Docker Image
-    needs: test
+  build-test-push:
+    name: Build, Test in Container & Push
     runs-on: ubuntu-latest
     if: github.ref != 'refs/heads/main'
     steps:
@@ -69,10 +37,7 @@ jobs:
           echo "image=${IMAGE_NAME}" >> "$GITHUB_OUTPUT"
           echo "tag=${DOCKER_TAG}" >> "$GITHUB_OUTPUT"
           echo "actor=${ACTOR_NAME}" >> "$GITHUB_OUTPUT"
-          echo "Building Docker image: ${IMAGE_NAME}:${DOCKER_TAG} (Registry: ${REGISTRY_HOST}, Actor: ${ACTOR_NAME})"
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+          echo "Target Docker image: ${IMAGE_NAME}:${DOCKER_TAG} (Registry: ${REGISTRY_HOST}, Actor: ${ACTOR_NAME})"
 
       - name: Login to Gitea Container Registry
         uses: docker/login-action@v3
@@ -81,11 +46,10 @@ jobs:
           username: ${{ steps.prep.outputs.actor }}
           password: ${{ secrets.PUSH_TOKEN || secrets.GITEA_TOKEN || github.token }}
 
-      - name: Build and Push Multi-Arch Image
-        uses: docker/build-push-action@v6
-        with:
-          context: .
-          platforms: linux/amd64,linux/arm64
-          push: true
-          tags: |
-            ${{ steps.prep.outputs.image }}:${{ steps.prep.outputs.tag }}
+      - name: Build & Run All Checks in Container, then Push
+        run: |
+          FULL_IMAGE="${{ steps.prep.outputs.image }}:${{ steps.prep.outputs.tag }}"
+          echo "🚀 Building container & executing Frontend/Backend checks inside image: ${FULL_IMAGE}"
+          DOCKER_BUILDKIT=1 docker build --progress=plain -t "${FULL_IMAGE}" .
+          echo "✅ All checks & tests passed inside container! Pushing ${FULL_IMAGE}..."
+          docker push "${FULL_IMAGE}"