fix(BA-7269): gate image publication on release success and grant actions:read

Claude-Session: https://claude.ai/code/session_01UX2YfP299F2QMfKwZF8WPT

Author: kyujin-cho

.github/workflows/ci.yml

@@ -56,6 +56,7 @@ jobs:
             - 'python*.lock'
             - 'tools/*.lock'
             - '.github/workflows/ci.yml'
+            - '.github/workflows/docker-images.yml'
 
 
   check-build-and-lint:
@@ -772,13 +773,17 @@ jobs:
     uses: ./.github/workflows/sbom.yml
 
   # Publishes the lablup/backend.ai-* service images from the wheels built in
-  # this run. Deliberately NOT in make-final-release's `needs`: a Docker Hub
-  # outage must not block the PyPI/GitHub release.
+  # this run. Deliberately NOT in make-final-release's `needs`: the release
+  # never waits for images, so a Docker Hub outage must not block the
+  # PyPI/GitHub release. The reverse dependency does hold: images wait for a
+  # successful release so that a failed release cannot publish images (and
+  # `latest`) for a version that was never released.
   build-docker-images:
-    needs: [build-wheels]
+    needs: [build-wheels, make-final-release]
     if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
     permissions:
       contents: read
+      actions: read  # the called workflow downloads wheel artifacts via the REST API
       id-token: write  # the called workflow mints the OIDC token for Docker Hub
     uses: ./.github/workflows/docker-images.yml