ci(docker): add workflow_dispatch inputs for manual version tagging

Add `version` (string) and `latest` (bool) inputs so the Docker
workflow can be manually re-run for a past release without moving any
git tag. The input is passed verbatim into main.version via ldflags
(preserving the leading `v` to match tag-push builds), while
docker/metadata-action's semver parser normalizes it to bare-number
image tags (1.0.3 / 1.0 / 1) per Docker convention.

Author: missuo

.github/workflows/docker.yml

@@ -23,6 +23,16 @@ on:
       - 'docker-entrypoint.sh'
       - '.github/workflows/docker.yml'
   workflow_dispatch:
+    inputs:
+      version:
+        description: 'Version to tag the image with — use the same form as the matching git tag, e.g. v1.0.3 (leave blank to skip semver tags).'
+        required: false
+        type: string
+      latest:
+        description: 'Also tag this build as `latest`.'
+        required: false
+        type: boolean
+        default: true
 
 permissions:
   contents: read
@@ -41,7 +51,12 @@ jobs:
       - name: Resolve version
         id: ver
         run: |
-          if [[ "${GITHUB_REF}" == refs/tags/* ]]; then
+          manual="${{ inputs.version }}"
+          if [[ -n "$manual" ]]; then
+            # Keep the input verbatim so the in-binary version string matches
+            # what tag-push builds produce (e.g. "v1.0.3", not "1.0.3").
+            echo "version=${manual}" >> "$GITHUB_OUTPUT"
+          elif [[ "${GITHUB_REF}" == refs/tags/* ]]; then
             echo "version=${GITHUB_REF#refs/tags/}" >> "$GITHUB_OUTPUT"
           else
             echo "version=dev-${GITHUB_SHA::7}" >> "$GITHUB_OUTPUT"
@@ -64,13 +79,16 @@ jobs:
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           tags: |
-            type=ref,event=branch
+            type=ref,event=branch,enable=${{ github.event_name != 'workflow_dispatch' }}
             type=ref,event=pr
             type=semver,pattern={{version}}
             type=semver,pattern={{major}}.{{minor}}
             type=semver,pattern={{major}}
+            type=semver,pattern={{version}},value=${{ inputs.version }},enable=${{ github.event_name == 'workflow_dispatch' && inputs.version != '' }}
+            type=semver,pattern={{major}}.{{minor}},value=${{ inputs.version }},enable=${{ github.event_name == 'workflow_dispatch' && inputs.version != '' }}
+            type=semver,pattern={{major}},value=${{ inputs.version }},enable=${{ github.event_name == 'workflow_dispatch' && inputs.version != '' }}
             type=sha,prefix=sha-,format=short
-            type=raw,value=latest,enable={{is_default_branch}}
+            type=raw,value=latest,enable=${{ (github.event_name == 'push' && github.ref == format('refs/heads/{0}', github.event.repository.default_branch)) || (github.event_name == 'workflow_dispatch' && inputs.latest) }}
 
       - name: Build and push
         uses: docker/build-push-action@v6