feat(docker): use shared native multi-arch workflow

Migrate docker-publish to FuelLabs/github-actions docker-build-push
with build-backend native and linux/amd64,linux/arm64 on native runners.

Refs DEVOPS-1248

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: gondoi

.github/workflows/docker-publish.yml

@@ -0,0 +1,57 @@
+# Pin the reusable workflow to a commit until github-actions merges checkout support; then @master.
+# Ref must be a literal (not env). Update SHA when rebasing FuelLabs/github-actions.
+# Inner steps in docker-build-push.yml use FuelLabs/github-actions composites; they may
+# still reference @master — if something diverges during testing, align those refs in the PR.
+#
+# Do not use strategy.matrix on the same job as workflow_call + job-level `if` with
+# matrix.* — job `if` is evaluated before matrix expansion for reusable workflows.
+# Add one job per package with an explicit `if` (package name literal) instead.
+name: Build and publish Docker image
+
+on:
+  workflow_dispatch:
+    inputs:
+      package:
+        type: choice
+        description: "Package to build and publish"
+        default: "all"
+        required: true
+        options:
+          - all
+          - sv-dune
+  push:
+    branches:
+      - main
+  release:
+    types:
+      - published
+
+permissions:
+  contents: read
+  packages: write
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  build-and-publish-sv-dune:
+    uses: FuelLabs/github-actions/.github/workflows/docker-build-push.yml@7bce413db5867bcb2faf83108f6a75b199ccafe1
+    if: ${{ github.event_name != 'workflow_dispatch' || github.event.inputs.package == 'all' || github.event.inputs.package == 'sv-dune' }}
+    with:
+      auth-mode: registry-login
+      registry: ghcr.io
+      build-backend: native
+      platforms: linux/amd64,linux/arm64
+      runs-on-amd64: ubuntu-latest
+      runs-on-arm64: ubuntu-24.04-arm
+      docker-context: .
+      dockerfile: cluster/docker/sv-dune.Dockerfile
+      image: ghcr.io/fuellabs/sv-dune
+      tags: |
+        type=ref,event=branch
+        type=sha,prefix=
+        type=semver,pattern={{raw}}
+    secrets:
+      REGISTRY_USERNAME: ${{ github.repository_owner }}
+      REGISTRY_PASSWORD: ${{ secrets.GITHUB_TOKEN }}