Isolate the legacy GHCR mirror in its own release job

[RhysSullivan]

The mirror to the pre-org namespace (ghcr.io/rhyssullivan/executor-selfhost, ~130 pulls/day) stays — but moves out of the merge job into a dedicated mirror-legacy job so:

• the canonical publish can never be blocked or marked failed by mirror trouble, and
• a mirror failure (an expired GHCR_LEGACY_TOKEN, which is how it silently froze at v1.5.37 for 18 days) shows as one red job pointing at exactly what to fix.

The token secret has been replaced with a durable one, and the legacy tags were re-pointed at the canonical v1.5.41 digest, so both namespaces are current and identical again. No behavior change for the canonical image.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	executor-marketing	b629f7a	Commit Preview URL Branch Preview URL	Aug 17 2026, 04:09 PM

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	executor-cloud	b629f7a	Aug 17 2026, 04:10 PM

[github-actions]

Cloudflare preview

Torn down — the PR is closed.

[pkg-pr-new]

Open in StackBlitz

@executor-js/cli

npm i https://pkg.pr.new/@executor-js/cli@1620

@executor-js/config

npm i https://pkg.pr.new/@executor-js/config@1620

@executor-js/execution

npm i https://pkg.pr.new/@executor-js/execution@1620

@executor-js/sdk

npm i https://pkg.pr.new/@executor-js/sdk@1620

@executor-js/codemode-core

npm i https://pkg.pr.new/@executor-js/codemode-core@1620

@executor-js/runtime-quickjs

npm i https://pkg.pr.new/@executor-js/runtime-quickjs@1620

@executor-js/plugin-file-secrets

npm i https://pkg.pr.new/@executor-js/plugin-file-secrets@1620

@executor-js/plugin-graphql

npm i https://pkg.pr.new/@executor-js/plugin-graphql@1620

@executor-js/plugin-keychain

npm i https://pkg.pr.new/@executor-js/plugin-keychain@1620

@executor-js/plugin-mcp

npm i https://pkg.pr.new/@executor-js/plugin-mcp@1620

@executor-js/plugin-onepassword

npm i https://pkg.pr.new/@executor-js/plugin-onepassword@1620

@executor-js/plugin-openapi

npm i https://pkg.pr.new/@executor-js/plugin-openapi@1620

executor

npm i https://pkg.pr.new/executor@1620

commit: b629f7a