ci: force GHCR images to public; update docker-compose to use postgres-runtime

.github/workflows/build-service-images.yml

@@ -160,3 +160,18 @@ jobs:
         run: |
           IMG=${{ env.REGISTRY }}/${{ env.ORG }}/${{ matrix.service.name }}@${{ steps.build.outputs.digest }}
           cosign sign --yes "$IMG"
+
+      # -------------------------------------------------------------
+      # Make GHCR Image Public
+      # -------------------------------------------------------------
+      - name: Make Image Public
+        if: env.PUSH_IMAGES == 'true' || env.PUSH_IMAGES == true
+        run: |
+          IMAGE="${{ env.REGISTRY }}/${{ env.ORG }}/${{ matrix.service.name }}"
+          PACKAGE="${{ matrix.service.name }}"
+          echo "Setting visibility of $IMAGE to public..."
+          gh api \
+            --method PATCH \
+            -H "Accept: application/vnd.github+json" \
+            /orgs/${{ env.ORG }}/packages/container/${PACKAGE}/visibility \
+            -f visibility="public"

deploy/docker-compose/docker-compose.yaml

@@ -4,7 +4,7 @@ x-workspace: &workspace ${XCONTROL_WORKSPACE:-..}
 
 services:
   db:
-    image: postgres:17-alpine
+    image: ghcr.io/cloud-neutral-toolkit/postgres-runtime:latest
     container_name: xcontrol-db
     restart: unless-stopped
     environment: