Stop publishing on main push and remove GHCR; images go to Docker Hub only.
Multi-user image hosting with RBAC, upload preferences, and admin settings.