Automate multi-arch Docker image builds (amd64+arm64) on push to main
or version tags via GitHub Actions. Add OCI metadata labels for GHCR
discoverability. Update release script to sync infra files to
public-release branch.
- Remove interactive read prompt that blocked non-interactive shells
- Exclude .md files and .claude/ directory from Claude reference scan
- Also check for "anthropic" references
- Hard-fail instead of prompting on Claude references found
- Remove fragile final diff grep (was matching harmless content)
- Improve forbidden file check to report all matches before aborting