fix(ci): switch to GHCR (ghcr.io/farhoodliquor) from Docker Hub

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.github/workflows/ci.yml

@@ -46,6 +46,7 @@ jobs:
     runs-on: runners-farhoodliquor
     permissions:
       contents: read
+      packages: write
 
     steps:
       - name: Checkout
@@ -54,11 +55,12 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
 
-      - name: Log in to Docker Hub
+      - name: Log in to GHCR
         uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
         with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          registry: ghcr.io
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and push worker image
         uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
@@ -66,8 +68,8 @@ jobs:
           context: .
           push: true
           tags: |
-            keygraph/shannon:latest
+            ghcr.io/farhoodliquor/shannon:latest
-            keygraph/shannon:sha-${{ github.sha }}
+            ghcr.io/farhoodliquor/shannon:sha-${{ github.sha }}
 
       - name: Build and push API image
         uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
@@ -76,5 +78,5 @@ jobs:
           file: apps/api/Dockerfile
           push: true
           tags: |
-            keygraph/shannon-api:latest
+            ghcr.io/farhoodliquor/shannon-api:latest
-            keygraph/shannon-api:sha-${{ github.sha }}
+            ghcr.io/farhoodliquor/shannon-api:sha-${{ github.sha }}

apps/api/infra/base/deployment.yaml

@@ -18,7 +18,7 @@ spec:
       serviceAccountName: shannon-api
       containers:
         - name: api
-          image: keygraph/shannon-api:latest
+          image: ghcr.io/farhoodliquor/shannon-api:latest
           ports:
             - containerPort: 3000
               name: http
@@ -26,7 +26,7 @@ spec:
             - name: TEMPORAL_ADDRESS
               value: shannon-temporal:7233
             - name: WORKER_IMAGE
-              value: keygraph/shannon:latest
+              value: ghcr.io/farhoodliquor/shannon:latest
             - name: K8S_NAMESPACE
               value: shannon
           envFrom: