ci(sync): allow manual awesome-unraid sync

[JSONbored]

Summary

• allow the CI / SimpleLogin-AIO workflow to open or refresh the awesome-unraid sync PR from workflow_dispatch
• keep manual image publishing opt-in instead of automatic on every manual run

What changed

• added sync_awesome_unraid workflow input to build.yml
• added publish_images workflow input to build.yml
• updated the sync job condition so it can run from push on main or from manual dispatch when sync_awesome_unraid=true
• updated scripts/ci_flags.py so manual runs only publish images when explicitly requested
• updated scripts/test-ci-flags.py to cover the new manual-run behavior
• updated release.yml to pass publish_images=true when release automation dispatches the CI workflow

Why

• the awesome-unraid sync could previously only happen on a successful push run to main
• if that push run was blocked, cancelled, or skipped, there was no clean way to trigger sync without making another commit
• manual runs were also implicitly publishing images, which was too broad for a sync-only action

Validation

• python3 scripts/test-ci-flags.py
• python3 -m py_compile scripts/ci_flags.py scripts/test-ci-flags.py

Notes

• after merge, you can run CI / SimpleLogin-AIO manually on main with:
  • sync_awesome_unraid=true
  • publish_images=false
  • run_smoke_test=false
• release-driven workflow dispatches still publish images because release.yml now passes publish_images=true