feat: minimum image age gate for auto-updates

.github/workflows/build.yml

@@ -0,0 +1,34 @@
+name: Build Docker Image
+
+on:
+  push:
+    branches: [feature/minimum-image-age]
+
+permissions:
+  contents: read
+  packages: write
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: true
+          tags: ghcr.io/mgabor3141/dockhand:image-age
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

drizzle-pg/0004_add_image_age_settings.sql

@@ -0,0 +1,3 @@
+ALTER TABLE "auto_update_settings" ADD COLUMN "minimum_image_age_days" integer;--> statement-breakpoint
+ALTER TABLE "auto_update_settings" ADD COLUMN "bypass_age_for_security_fixes" boolean;--> statement-breakpoint
+ALTER TABLE "auto_update_settings" ADD COLUMN "excluded_from_env_update" boolean DEFAULT false;