Merged wiht upstream added slack interactive mode

CI: fix release builds producing zero tags

A release build failed with "tag is needed when pushing to registry"
because metadata-action emitted no tags at all:

- type=semver silently produces nothing for a tag without a patch
  component, e.g. "v2.0" (logged only as a warning).
- latest was gated on is_default_branch, which is false for a release
  since it builds from a tag ref. Deployments pinned to :latest would
  never have been updated even on a successful build.

Adds type=ref,event=tag as a safety net so any tag always yields at
least one image tag, and keys latest off the event instead.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QSwZJ6jnJ8Gs8mLLkx2mHY