fix(ci): lowercase IMAGE_NAME and restore skipped build scripts

Two bugs were breaking the CI build:

1. IMAGE_NAME was 'MiOS-DEV/mios' — GHCR requires lowercase registry paths.
   Changed to 'mios-dev/mios' so pushes and cosign signing target the
   correct canonical registry namespace.

2. build.sh CONTAINERFILE_SCRIPTS skip list incorrectly excluded 8 scripts
   (18-apply-boot-fixes, 19-k3s-selinux, 20-fapolicyd-trust, 21-moby-engine,
   22-freeipa-client, 23-uki-render, 25-firewall-ports, 26-gnome-remote-desktop)
   with the comment "called explicitly by the Containerfile" — but the
   Containerfile never calls them. They were permanently dead code.

   Reduced skip list to only:
   - 08-system-files-overlay.sh (still called explicitly before build.sh)
   - 37-ollama-prep.sh (intentional: local-only large model download)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: mios-dev

.github/workflows/mios-ci.yml

@@ -13,7 +13,7 @@ on:
 
 env:
   REGISTRY: ghcr.io
-  IMAGE_NAME: MiOS-DEV/mios
+  IMAGE_NAME: mios-dev/mios
 
 jobs:
   build:

automation/build.sh

@@ -49,9 +49,10 @@ export SYSTEMD_OFFLINE=1
 export container=podman
 
 # ── Execute numbered scripts ────────────────────────────────────────────────
-# Scripts 18/19/20-fapolicyd/21/22 are called explicitly by the Containerfile
-# AFTER this script completes. Skip them here to prevent double-execution.
-CONTAINERFILE_SCRIPTS="08-system-files-overlay.sh 18-apply-boot-fixes.sh 19-k3s-selinux.sh 20-fapolicyd-trust.sh 21-moby-engine.sh 22-freeipa-client.sh 23-uki-render.sh 25-firewall-ports.sh 26-gnome-remote-desktop.sh 37-ollama-prep.sh"
+# Skip list:
+#   08-system-files-overlay.sh  — called explicitly by the Containerfile BEFORE this script
+#   37-ollama-prep.sh           — intentional local-only step (large model download; not for CI)
+CONTAINERFILE_SCRIPTS="08-system-files-overlay.sh 37-ollama-prep.sh"
 
 TOTAL_START=$SECONDS
 SCRIPT_COUNT=0