fix: pin docker image and opentower dep to versioned tags (#86)

Replace mutable :latest tags with pinned version numbers to prevent
Docker layer caching and Coder image pull from serving stale builds.

bump-version.sh now updates coder-template/main.tf and
opencode-config-package.json alongside opentower/package.json so all
three stay in sync on every release.

Author: MathurAditya724

coder-template/main.tf

@@ -44,7 +44,7 @@ data "coder_workspace_owner" "me" {}
 variable "docker_image" {
   description = "Docker image to use for the workspace"
   type        = string
-  default     = "ghcr.io/mathuraditya724/outpost:latest"
+  default     = "ghcr.io/mathuraditya724/outpost:0.3.0"
 }
 
 data "coder_parameter" "gh_token" {

scripts/bump-version.sh

@@ -4,6 +4,9 @@
 # Craft's built-in auto-bumping runs `npm version` which can fail on
 # file: deps. We bypass npm entirely by editing package.json with jq.
 #
+# Also bumps:
+#   - coder-template/main.tf  (docker_image default tag)
+#
 # Craft passes the new version via CRAFT_NEW_VERSION.
 set -euo pipefail
 
@@ -15,11 +18,17 @@ fi
 
 echo "Bumping opentower to ${NEW_VERSION}"
 
+# 1) opentower package.json
 PKG="packages/opentower/package.json"
 tmp="$(mktemp)"
 jq --arg v "$NEW_VERSION" '.version = $v' "$PKG" > "$tmp"
 mv "$tmp" "$PKG"
 name=$(jq -r '.name' "$PKG")
 echo "  ✓ ${name} → ${NEW_VERSION}"
 
+# 2) Coder template: pin docker_image default to the release tag
+TF="coder-template/main.tf"
+sed -i "s|ghcr.io/mathuraditya724/outpost:[^\"]*|ghcr.io/mathuraditya724/outpost:${NEW_VERSION}|" "$TF"
+echo "  ✓ ${TF} → :${NEW_VERSION}"
+
 echo "Version bump complete."