Generate date-based image versions in CI and preserve VERSION_TAG
through the Justfile build.

Keep the CI variables available while passing the GitHub token file.

Mount the CI token as a build secret for release asset requests.

Load a private .env when present, but keep CI configuration in GitHub
runtime variables and retain the tracked template as a guide.