Goals: - Non-root images with healthcheck. - Volumes for identity/keystore. - Buildx multi-arch. Acceptance: - Images published on tag.
