v0.6.1 - release pipeline hardening

Maintenance only. The application is unchanged from 0.6.0; this release exists
to harden the release pipeline and to exercise it end to end.

Changed

• Releases now publish to npm from CI using trusted publishing, so no npm token
  is stored anywhere and each release carries provenance you can verify.
• The Docker latest tag only moves on a version tag. A manual workflow run
  from a branch previously re-pointed it, which could have made latest mean
  unreleased code.

Install

npx dbxlite-ui@0.6.1

docker run -p 8080:80 hfmsio/dbxlite:0.6.1

Also on GHCR as ghcr.io/hfmsio/dbxlite:0.6.1, for linux/amd64 and linux/arm64.

This is the first release published from CI. The npm package carries a signed
provenance statement, so you can verify it was built from this repository.