fix(ci): trigger workflow on main branch to enable :latest tag

Changes:
- Create Gitea workflow for ai-stack-deployer
- Trigger on main branch (default branch)
- Use oussamadouhou + REGISTRY_TOKEN for authentication
- Build from ./Dockerfile

This enables :latest tag creation via {{is_default_branch}}.

Tags created:
- git.app.flexinit.nl/oussamadouhou/ai-stack-deployer:latest
- git.app.flexinit.nl/oussamadouhou/ai-stack-deployer:<sha>

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

START-HERE.md

@@ -0,0 +1,48 @@
+# START HERE
+
+🚨🚨🚨🚨 ***PRINCIPLE RULES ALWAYS FIRST*** 🚨🚨🚨🚨
+
+## What Happened Last Session
+
+**Last Session** (2026-01-09 21:48):
+- Fixed CI workflow in `oh-my-opencode-free` project
+- Changed trigger from `master` → `main` to enable `:latest` tag
+- Build successful: `git.app.flexinit.nl/oussamadouhou/oh-my-opencode-free:latest`
+- Commit: `bdfa5c1`
+
+## Current Task
+
+**Build is successful** - Now need to:
+1. Create `.gitea/workflows/docker-publish.yaml` for THIS project
+2. Initialize git repo and push to trigger build
+3. Enable `:latest` tag for `ai-stack-deployer` image
+
+## Quick Reference
+
+**Working Workflow**: `/home/odouhou/locale-projects/oh-my-opencode-free/.gitea/workflows/docker-publish.yaml`
+
+**Key Config**:
+- Triggers on `main` branch (not master)
+- Registry: `git.app.flexinit.nl`
+- Auth: `oussamadouhou` + `REGISTRY_TOKEN` secret
+- Tags: `:latest` + `:<sha>`
+
+## DOCUMENTATION
+
+**Environment**:
+```bash
+STACK_IMAGE=git.app.flexinit.nl/oussamadouhou/oh-my-opencode-free:latest
+DOKPLOY_URL=https://app.flexinit.nl
+```
+
+## Commands
+
+```bash
+# Dev server
+bun run dev
+
+# Docker
+docker-compose up -d
+```
+
+See `CLAUDE.md` for full documentation.