fix(ci): trigger image builds on every path the Dockerfile copies

The build filtered on api/** while the Dockerfile COPYs nine more paths, so
changes to mcp_server/, flows/, policies/, prompts/, scripts/,
task_flow_engine/, templates/, alembic.ini and — most seriously —
migrations/ merged to main without ever producing a new image.

A schema migration would not have shipped.

Refs CUST-WP-0067-T08

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006

.forgejo/workflows/image.yaml

@@ -9,11 +9,24 @@ on:
   push:
     branches:
       - main
+    # Must list every path the Dockerfile COPYs, or a change ships to git
+    # without ever reaching the image. This previously covered only api/**,
+    # so edits to mcp_server/ and — more seriously — migrations/ produced no
+    # rebuild (CUST-WP-0067-T08).
     paths:
       - ".forgejo/workflows/image.yaml"
       - "Dockerfile"
+      - "alembic.ini"
       - "api/**"
+      - "flows/**"
+      - "mcp_server/**"
+      - "migrations/**"
+      - "policies/**"
+      - "prompts/**"
       - "pyproject.toml"
+      - "scripts/**"
+      - "task_flow_engine/**"
+      - "templates/**"
       - "uv.lock"
   workflow_dispatch: