Follows heirloom pattern:
- Builds deb Dockerfile on push to master
- Pushes to registry.johnogle.info/protonmail-bridge
- Auto-updates k3s-cluster-config HelmRelease with new tag
Requires secrets: REGISTRY_USERNAME, REGISTRY_PASSWORD, CONFIG_REPO_TOKEN