- release.yml: dual-push to GHCR + Docker Hub when vars.DOCKERHUB_USERNAME
is set; falls back to GHCR-only when unset (no behavior change for forks).
- .env.example: surface docker.io as a first-class WOC_IMAGE_PREFIX option.
- doc/发布到GHCR.md: document the one-time Variable + Secret setup and the
prerequisite of pre-creating the public repos on hub.docker.com.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>