fix: wait for Build Binaries workflow before Docker build

Docker workflow now uses workflow_run trigger to wait for Build Binaries
to complete before attempting to download the binary. This fixes the race
condition where Docker build would fail because binaries weren't uploaded yet.

Author: Ondrej Machala

.github/workflows/docker.yml

@@ -1,8 +1,11 @@
 name: Docker
 
 on:
-  release:
-    types: [published]
+  # Trigger after Build Binaries workflow completes (not on release directly)
+  # This ensures binaries are uploaded before we try to download them
+  workflow_run:
+    workflows: ['Build Binaries']
+    types: [completed]
   workflow_dispatch:
     inputs:
       version:
@@ -12,20 +15,24 @@ on:
 jobs:
   docker:
     runs-on: ubuntu-latest
+    # Only run if Build Binaries succeeded (or if manually triggered)
+    if: ${{ github.event_name == 'workflow_dispatch' || github.event.workflow_run.conclusion == 'success' }}
     steps:
       - uses: actions/checkout@v4
 
       - name: Determine version
         id: version
         run: |
-          if [ "${{ github.event_name }}" = "release" ]; then
-            # Extract version from tag ([email protected] -> 0.8.0)
-            VERSION="${{ github.event.release.tag_name }}"
+          if [ "${{ github.event_name }}" = "workflow_run" ]; then
+            # Get the latest release version
+            VERSION=$(gh release view --json tagName -q '.tagName')
             VERSION="${VERSION#heroshot@}"
           else
             VERSION="${{ github.event.inputs.version }}"
           fi
           echo "version=$VERSION" >> $GITHUB_OUTPUT
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Download heroshot binary from release
         run: |