a52244af39
docker-compose pulls :latest but the workflow only pushed branch-name tags (e.g. :main) and SHA tags -- never :latest. Portainer stacks reported "manifest unknown" when trying to pull the image. Add type=raw,value=latest scoped to the default branch so pushes to main now also tag the image as :latest.