Set latest tag based on branch in sdk and docker snapshots

[ksobrenat32]

This pull request updates the GitHub Actions workflows responsible for publishing Beam SDK and runner Docker images. The main goal is to ensure that the "latest" Docker tag is only applied when building from the master branch, preventing non-master branches from overwriting the "latest" tag, fixes #24130 .

A step was added to set the LATEST_TAG variable to ,latest only when the workflow runs on the master branch, ensuring the "latest" tag is only used in that context. Outside of master it uses only the commit SHA.

[gemini-code-assist]

Note

Gemini is unable to generate a summary for this pull request due to the file types involved not being currently supported.

[ksobrenat32]

I also see the workflow has been failing, it looks like it has to do with the time limit, I will take a look.

[github-actions]

Assigning reviewers:

R: @damccorm for label build.

Note: If you would like to opt out of this review, comment assign to next reviewer.

Available commands:

• stop reviewer notifications - opt out of the automated review tooling
• remind me after tests pass - tag the comment author after tests pass
• waiting on author - shift the attention set back to the author (any comment or push by the author will return the attention set to the reviewers)

The PR bot will only process comments in the main thread (not review comments).

[damccorm]

Can we update this to use the same conditional logic as the other workflow? It seems cleaner

[ksobrenat32]

Done :)

Now all the images are tagged with the sha by default but latest just when working on main

[damccorm]

Thanks!