fix: push final tags directly from buildx, remove publish-images step

The publish-images step used an alpine container to run skopeo for
re-tagging, but intermittent DNS failures prevent apk from installing
packages. Instead, have the buildx plugin push with both the pipeline
number tag and latest tag directly, eliminating the extra step.

.woodpecker.yml

@@ -44,7 +44,8 @@ steps:
         - EXTRAS=api,news,sentiment,trading,backtester
         - SERVICE_MODULE=api_gateway
       tags:
-        - "build-${CI_PIPELINE_NUMBER}"
+        - "${CI_PIPELINE_NUMBER}"
+        - latest
 
   - name: build-dashboard-image
     image: woodpeckerci/plugin-docker-buildx
@@ -60,36 +61,14 @@ steps:
       build_args:
         - NGINX_CONF=docker/nginx-k8s.conf
       tags:
-        - "build-${CI_PIPELINE_NUMBER}"
-
-  - name: publish-images
-    image: alpine
-    depends_on:
-      - build-service-image
-      - build-dashboard-image
-    environment:
-      DOCKERHUB_TOKEN:
-        from_secret: dockerhub-token
-    commands:
-      - apk add --no-cache skopeo
-      - |
-        for REPO in trading-bot-service trading-bot-dashboard; do
-          skopeo copy \
-            --src-creds "viktorbarzin:$$DOCKERHUB_TOKEN" \
-            --dest-creds "viktorbarzin:$$DOCKERHUB_TOKEN" \
-            "docker://docker.io/viktorbarzin/$${REPO}:build-${CI_PIPELINE_NUMBER}" \
-            "docker://docker.io/viktorbarzin/$${REPO}:${CI_PIPELINE_NUMBER}"
-          skopeo copy \
-            --src-creds "viktorbarzin:$$DOCKERHUB_TOKEN" \
-            --dest-creds "viktorbarzin:$$DOCKERHUB_TOKEN" \
-            "docker://docker.io/viktorbarzin/$${REPO}:build-${CI_PIPELINE_NUMBER}" \
-            "docker://docker.io/viktorbarzin/$${REPO}:latest"
-        done
+        - "${CI_PIPELINE_NUMBER}"
+        - latest
 
   - name: update-deployment
     image: alpine
     depends_on:
-      - publish-images
+      - build-service-image
+      - build-dashboard-image
     commands:
       - apk add --no-cache curl jq
       - |