ci(docker): publish on tag push

Mirrors cargo.yaml so a single tag push fires both the crates.io
and Docker Hub releases instead of requiring a manual dispatch.

feat(ci) update cross compile for release