feat(ci): Add OpenBao and Orchestrator image builds to Woodpecker CI

Add missing Docker image builds for swarm deployment.

Changes:
- Added docker-build-openbao step to .woodpecker.yml
- Added docker-build-orchestrator step to .woodpecker.yml
- Updated docker-compose.swarm.yml to use registry images
  (git.mosaicstack.dev/mosaic/*)
- Added IMAGE_TAG variable support for versioned deployments
- Updated deploy-swarm.sh to support both registry and local images

Image tagging strategy:
- All commits: SHA tag (e.g., 658ec077)
- main branch: latest + SHA
- develop branch: dev + SHA
- git tags: version tag + SHA

Registry images:
- git.mosaicstack.dev/mosaic/postgres
- git.mosaicstack.dev/mosaic/openbao
- git.mosaicstack.dev/mosaic/api
- git.mosaicstack.dev/mosaic/orchestrator
- git.mosaicstack.dev/mosaic/web

Deployment modes:
- IMAGE_TAG=latest (default, use registry latest)
- IMAGE_TAG=dev (use registry dev tag)
- IMAGE_TAG=local (use local builds via build-images.sh)

.env.example

@@ -158,6 +158,18 @@ SEMANTIC_SEARCH_SIMILARITY_THRESHOLD=0.5
 # ======================
 NODE_ENV=development
 
+# ======================
+# Docker Image Configuration
+# ======================
+# Docker image tag for swarm deployments
+# Options:
+#   - latest: Pull latest stable images from registry (default for production)
+#   - dev: Pull development images from registry
+#   - local: Use locally built images (for development)
+#   - <commit-sha>: Use specific commit SHA tag (e.g., 658ec077)
+#   - <version>: Use specific version tag (e.g., v1.0.0)
+IMAGE_TAG=latest
+
 # ======================
 # Docker Compose Profiles
 # ======================