Make Docker Hub publish best-effort in CI

Author: rodion-m

.github/workflows/ci.yml

@@ -94,7 +94,9 @@ jobs:
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Login to Docker Hub
+        id: dockerhub_login
         if: github.event_name == 'push'
+        continue-on-error: true
         uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
@@ -111,17 +113,30 @@ jobs:
           tags: ${{ env.IMAGE_NAME }}:pr-${{ github.event.number }}
           cache-from: type=gha
 
-      # Push to main: build multi-platform and push with rolling tags
-      - name: Build and push Docker image
+      # Push to main: build multi-platform and push the production GHCR tag.
+      - name: Build and push Docker image (GHCR)
         if: github.event_name == 'push'
         uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
         with:
           push: true
           platforms: linux/amd64,linux/arm64
           file: ./Dockerfile
-          tags: |
-            ${{ env.IMAGE_NAME }}:main
-            ${{ env.DOCKERHUB_IMAGE }}:mcp-dev
+          tags: ${{ env.IMAGE_NAME }}:main
+          labels: |
+            io.modelcontextprotocol.server.name=io.github.CodeAlive-AI/codealive-mcp
+          cache-from: type=gha
+          cache-to: type=gha
+
+      # Docker Hub is a secondary self-hosted distribution channel. Missing
+      # credentials must not block GHCR, because production pulls from GHCR.
+      - name: Build and push Docker image (Docker Hub)
+        if: github.event_name == 'push' && steps.dockerhub_login.outcome == 'success'
+        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
+        with:
+          push: true
+          platforms: linux/amd64,linux/arm64
+          file: ./Dockerfile
+          tags: ${{ env.DOCKERHUB_IMAGE }}:mcp-dev
           labels: |
             io.modelcontextprotocol.server.name=io.github.CodeAlive-AI/codealive-mcp
           cache-from: type=gha