ci: add Docker image publish on tag

[arek-e]

Summary

• Adds GitHub Actions workflow that builds and pushes Docker image to GHCR on version tags (v*)
• Fixes Dockerfile pipx install uv SSL failure by using pip3 install directly
• Tags: x.y.z and x.y (e.g. 0.3.2 and 0.3)