Dual-publish MCP images to Docker Hub for self-hosted distribution

Self-hosted customers use Docker Hub for all CodeAlive images. MCP was
the only component on a separate registry (GHCR), which meant
`docker compose pull` and `manage.sh update` didn't update it.

Both CI and Release workflows now push to Docker Hub alongside GHCR:
- Release: :mcp + :mcp-v{VERSION} (immutable)
- CI (main): :mcp-dev

Requires DOCKERHUB_USERNAME and DOCKERHUB_TOKEN repository secrets.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: rodion-m

.github/workflows/ci.yml

@@ -9,6 +9,7 @@ on:
 env:
   DOCKER_REGISTRY: ghcr.io
   IMAGE_NAME: ghcr.io/codealive-ai/codealive-mcp
+  DOCKERHUB_IMAGE: ivanbirukcodealive/codealive_ai
 
 permissions:
   contents: read
@@ -92,6 +93,13 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
+      - name: Login to Docker Hub
+        if: github.event_name == 'push'
+        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
       # PR: build only (no push) to validate Dockerfile — single platform for speed
       - name: Build Docker image (PR validation)
         if: github.event_name == 'pull_request'
@@ -111,7 +119,9 @@ jobs:
           push: true
           platforms: linux/amd64,linux/arm64
           file: ./Dockerfile
-          tags: ${{ env.IMAGE_NAME }}:main
+          tags: |
+            ${{ env.IMAGE_NAME }}:main
+            ${{ env.DOCKERHUB_IMAGE }}:mcp-dev
           labels: |
             io.modelcontextprotocol.server.name=io.github.CodeAlive-AI/codealive-mcp
           cache-from: type=gha

.github/workflows/release.yml

@@ -20,6 +20,8 @@ on:
 env:
   DOCKER_REGISTRY: ghcr.io
   IMAGE_NAME: ghcr.io/codealive-ai/codealive-mcp
+  # Self-hosted customers get MCP from Docker Hub alongside backend images.
+  DOCKERHUB_IMAGE: ivanbirukcodealive/codealive_ai
 
 permissions:
   id-token: write   # MCP Registry OIDC authentication
@@ -146,6 +148,12 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
+      - name: Login to Docker Hub (self-hosted distribution)
+        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
       - name: Build and push Docker image
         uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
         with:
@@ -157,6 +165,8 @@ jobs:
             ${{ env.IMAGE_NAME }}:${{ steps.version.outputs.version }}
             ${{ env.IMAGE_NAME }}:v${{ steps.version.outputs.version }}
             ${{ env.IMAGE_NAME }}:latest
+            ${{ env.DOCKERHUB_IMAGE }}:mcp
+            ${{ env.DOCKERHUB_IMAGE }}:mcp-v${{ steps.version.outputs.version }}
           labels: |
             io.modelcontextprotocol.server.name=io.github.CodeAlive-AI/codealive-mcp
           cache-from: type=gha