ci: publish amd64 explorer image to GCR

Author: lacdonlang

.github/workflows/docker-image.yml

@@ -28,7 +28,10 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  IMAGE_NAME: ghcr.io/luxorlabs/luxor-qbit-explorer
+  CI_GCP_PROJECT_ID: ${{ secrets.CI_GCP_PROJECT_ID }}
+  CI_GCP_SERVICE_ACCOUNT: ${{ secrets.CI_GCP_SERVICE_ACCOUNT }}
+  CI_GCP_WORKLOAD_IDENTITY_PROVIDER: ${{ secrets.CI_GCP_WORKLOAD_IDENTITY_PROVIDER }}
+  IMAGE_NAME: gcr.io/analog-stage-198105/luxor-qbit-explorer
 
 jobs:
   test-build-publish:
@@ -37,7 +40,7 @@ jobs:
     timeout-minutes: 30
     permissions:
       contents: read
-      packages: write
+      id-token: write
 
     steps:
       - name: Repository checkout
@@ -61,13 +64,22 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd  # v4.0.0
 
-      - name: Login to GitHub Container Registry
+      - name: Authenticate to GCP
+        id: auth
+        if: github.event_name != 'pull_request'
+        uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093  # v3.0.0
+        with:
+          token_format: access_token
+          workload_identity_provider: ${{ env.CI_GCP_WORKLOAD_IDENTITY_PROVIDER }}
+          service_account: ${{ env.CI_GCP_SERVICE_ACCOUNT }}
+
+      - name: Login to GCR
         if: github.event_name != 'pull_request'
         uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121  # v4.1.0
         with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
+          registry: gcr.io
+          username: oauth2accesstoken
+          password: ${{ steps.auth.outputs.access_token }}
 
       - name: Generate image metadata
         id: meta
@@ -94,7 +106,7 @@ jobs:
         with:
           context: .
           file: Dockerfile
-          platforms: linux/amd64,linux/arm64
+          platforms: linux/amd64
           push: ${{ github.event_name != 'pull_request' }}
           tags: ${{ steps.meta.outputs.tags }}
           cache-from: type=gha

docker-compose.qbit.yml

@@ -31,7 +31,7 @@ services:
       start_period: 10s
 
   explorer:
-    image: ghcr.io/luxorlabs/luxor-qbit-explorer:latest
+    image: gcr.io/analog-stage-198105/luxor-qbit-explorer:latest
     build:
       context: .
       dockerfile: Dockerfile