ci: also tag built image as latest

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.gitea/workflows/build.yaml

@@ -30,10 +30,12 @@ jobs:
           if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
             TAG=${{ inputs.tag }}
           fi
-          IMAGE=gitea.home.hrajfrisbee.cz/${{ github.repository }}:$TAG
+          REPO=gitea.home.hrajfrisbee.cz/${{ github.repository }}
           docker build -f Dockerfile \
             --build-arg GIT_TAG=$TAG \
             --build-arg GIT_COMMIT=${{ github.sha }} \
             --build-arg BUILD_DATE=$(date -u +%Y-%m-%dT%H:%M:%SZ) \
-            -t $IMAGE .
-          docker push $IMAGE
+            -t $REPO:$TAG \
+            -t $REPO:latest .
+          docker push $REPO:$TAG
+          docker push $REPO:latest

deploy/externalsecret_gitea-registry.yaml

@@ -2,7 +2,7 @@ apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: gitea-registry
-  namespace: fujarna
+  namespace: gateway-cert-operator-system
 spec:
   refreshInterval: 1h
   secretStoreRef: