ci: build ingest and stream images for amd64 and arm64

Add Drone pipelines building both container images per architecture and
merging them into multi-arch manifests under registry.nemunai.re/radieo.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.drone-manifest-ingest.yml

@@ -0,0 +1,17 @@
+image: registry.nemunai.re/radieo/ingest:{{#if build.tag}}{{trimPrefix "v" build.tag}}{{else}}latest{{/if}}
+{{#if build.tags}}
+tags:
+{{#each build.tags}}
+  - {{this}}
+{{/each}}
+{{/if}}
+manifests:
+  - image: registry.nemunai.re/radieo/ingest:{{#if build.tag}}{{trimPrefix "v" build.tag}}-{{/if}}linux-amd64
+    platform:
+      architecture: amd64
+      os: linux
+  - image: registry.nemunai.re/radieo/ingest:{{#if build.tag}}{{trimPrefix "v" build.tag}}-{{/if}}linux-arm64
+    platform:
+      architecture: arm64
+      os: linux
+      variant: v8

.drone-manifest-stream.yml

@@ -0,0 +1,17 @@
+image: registry.nemunai.re/radieo/stream:{{#if build.tag}}{{trimPrefix "v" build.tag}}{{else}}latest{{/if}}
+{{#if build.tags}}
+tags:
+{{#each build.tags}}
+  - {{this}}
+{{/each}}
+{{/if}}
+manifests:
+  - image: registry.nemunai.re/radieo/stream:{{#if build.tag}}{{trimPrefix "v" build.tag}}-{{/if}}linux-amd64
+    platform:
+      architecture: amd64
+      os: linux
+  - image: registry.nemunai.re/radieo/stream:{{#if build.tag}}{{trimPrefix "v" build.tag}}-{{/if}}linux-arm64
+    platform:
+      architecture: arm64
+      os: linux
+      variant: v8

.drone.yml

@@ -0,0 +1,153 @@
+---
+kind: pipeline
+type: docker
+name: build-amd64
+
+platform:
+  os: linux
+  arch: amd64
+
+steps:
+  - name: publish ingest container image
+    image: plugins/docker
+    settings:
+      registry: registry.nemunai.re
+      repo: registry.nemunai.re/radieo/ingest
+      context: ingest
+      dockerfile: ingest/Dockerfile
+      auto_tag: true
+      auto_tag_suffix: ${DRONE_STAGE_OS}-${DRONE_STAGE_ARCH}
+      username:
+        from_secret: docker_username
+      password:
+        from_secret: docker_password
+    when:
+      event:
+        exclude:
+          - tag
+
+  - name: publish stream container image
+    image: plugins/docker
+    settings:
+      registry: registry.nemunai.re
+      repo: registry.nemunai.re/radieo/stream
+      context: stream
+      dockerfile: stream/Dockerfile
+      auto_tag: true
+      auto_tag_suffix: ${DRONE_STAGE_OS}-${DRONE_STAGE_ARCH}
+      username:
+        from_secret: docker_username
+      password:
+        from_secret: docker_password
+    when:
+      event:
+        exclude:
+          - tag
+
+trigger:
+  branch:
+    exclude:
+      - renovate/*
+  event:
+    - cron
+    - push
+    - tag
+
+---
+kind: pipeline
+type: docker
+name: build-arm64
+
+platform:
+  os: linux
+  arch: arm64
+
+steps:
+  - name: publish ingest container image
+    image: plugins/docker
+    settings:
+      registry: registry.nemunai.re
+      repo: registry.nemunai.re/radieo/ingest
+      context: ingest
+      dockerfile: ingest/Dockerfile
+      auto_tag: true
+      auto_tag_suffix: ${DRONE_STAGE_OS}-${DRONE_STAGE_ARCH}
+      username:
+        from_secret: docker_username
+      password:
+        from_secret: docker_password
+    when:
+      event:
+        exclude:
+          - tag
+
+  - name: publish stream container image
+    image: plugins/docker
+    settings:
+      registry: registry.nemunai.re
+      repo: registry.nemunai.re/radieo/stream
+      context: stream
+      dockerfile: stream/Dockerfile
+      auto_tag: true
+      auto_tag_suffix: ${DRONE_STAGE_OS}-${DRONE_STAGE_ARCH}
+      username:
+        from_secret: docker_username
+      password:
+        from_secret: docker_password
+    when:
+      event:
+        exclude:
+          - tag
+
+trigger:
+  branch:
+    exclude:
+      - renovate/*
+  event:
+    - cron
+    - push
+    - tag
+
+---
+kind: pipeline
+name: docker-manifest
+
+platform:
+  os: linux
+  arch: arm64
+
+steps:
+  - name: publish ingest manifest
+    image: plugins/manifest
+    settings:
+      auto_tag: true
+      ignore_missing: true
+      spec: .drone-manifest-ingest.yml
+      username:
+        from_secret: docker_username
+      password:
+        from_secret: docker_password
+
+  - name: publish stream manifest
+    image: plugins/manifest
+    settings:
+      auto_tag: true
+      ignore_missing: true
+      spec: .drone-manifest-stream.yml
+      username:
+        from_secret: docker_username
+      password:
+        from_secret: docker_password
+
+trigger:
+  branch:
+    exclude:
+      - renovate/*
+  event:
+    - cron
+    - push
+    - tag
+
+depends_on:
+  - build-amd64
+  - build-arm64

docker-compose.yml

@@ -1,7 +1,7 @@
 services:
   ingest:
     build: ./ingest
-    image: radieo-ingest
+    image: registry.nemunai.re/radieo/ingest
     volumes:
       - ./cache:/cache          # volume partagé avec le stream (rw : téléchargements)
       - ./state:/state          # état persistant (SQLite) hors du cache éphémère
@@ -41,7 +41,7 @@ services:
 
   stream:
     build: ./stream
-    image: radieo-stream
+    image: registry.nemunai.re/radieo/stream
     depends_on:
       ingest:
         condition: service_healthy