Follows heirloom pattern: - Builds deb Dockerfile on push to master - Pushes to registry.johnogle.info/protonmail-bridge - Auto-updates k3s-cluster-config HelmRelease with new tag Requires secrets: REGISTRY_USERNAME, REGISTRY_PASSWORD, CONFIG_REPO_TOKEN