When checks pass, click Merge pull request -> Confirm merge. A merge = push to main ->
triggers:
docker-build-push: build the image, push to ECR with tags <commit-sha> + latest.update-helm: clone vprofile-helm (with GITOPS_PAT), use yq to update app.tag in
values.yaml, commit & push.