Merge the "release/v2.1.4+node25.8.2" branch into the "maintenance/v2+node25" branch

This merge promotes `release/v2.1.4+node25.8.2` into `maintenance/v2+node25`, marking the next patch release on the Node.js 25 maintenance line. It consolidates one deployment workflow fix in `.github/workflows/deployment.yml` that disables implicit `latest` and `debug` tag generation in all `docker/metadata-action@v5` invocations used by the release and promotion flow.

In `Docker meta (version tags + labels)`, `Normalize tag (match tag)`, and `Normalize promote name (floating tag)`, the workflow now adds a `flavor:` block with `latest=false` and `debug=false`. This prevents `docker/metadata-action@v5` from generating implicit extra tags while preserving the existing explicit `type=ref,event=tag` and `type=raw,value=...` tag definitions.

This keeps deployment tag generation constrained to the configured release tag and manual promotion inputs. No migration steps are required beyond updating to `v2.1.4+node25.8.2` on the `maintenance/v2+node25` line.

Author: Amnoor

.github/workflows/deployment.yml

@@ -93,6 +93,9 @@ jobs:
             # Only create tags derived from the Git tag.
             # No floating tags (like "latest") are generated here.
             type=ref,event=tag
+          flavor: |
+            latest=false
+            debug=false
 
       # Authenticate to Docker Hub so the workflow can push images.
       - name: Login to Docker Hub
@@ -179,6 +182,9 @@ jobs:
             ${{ env.GHCR_IMAGE }}
           tags: |
             type=raw,value=${{ github.event.inputs.tag }}
+          flavor: |
+            latest=false
+            debug=false
 
       # Extract only the tag portion from metadata-action output of the tag.
       - name: Extract normalized tag only
@@ -205,6 +211,9 @@ jobs:
             ${{ env.GHCR_IMAGE }}
           tags: |
             type=raw,value=${{ github.event.inputs.promote_name }}
+          flavor: |
+            latest=false
+            debug=false
       
       # Extract only the promote name portion from metadata-action output of the floating tag.
       - name: Extract normalized promote tag