ci: publish verified ARM64 image to GHCR (#7)

Dockerfile

@@ -1,21 +1,28 @@
+FROM ghcr.io/astral-sh/uv:0.11.14 AS uv
+
 FROM python:3.12-slim
 
 ENV PYTHONUNBUFFERED=1 \
-    PIP_NO_CACHE_DIR=1 \
+    PYTHONDONTWRITEBYTECODE=1 \
+    UV_COMPILE_BYTECODE=1 \
+    UV_LINK_MODE=copy \
     JARCA_LEDGER_DB_PATH=/data/ledger.sqlite3 \
     JARCA_MCP_TRANSPORT=streamable-http \
     JARCA_MCP_HOST=0.0.0.0 \
     JARCA_MCP_PORT=8000 \
-    JARCA_MCP_STREAMABLE_HTTP_PATH=/mcp
+    JARCA_MCP_STREAMABLE_HTTP_PATH=/mcp \
+    PATH=/app/.venv/bin:$PATH
+
+COPY --from=uv /uv /uvx /usr/local/bin/
 
 WORKDIR /app
 
-COPY pyproject.toml README.md ./
+COPY pyproject.toml uv.lock README.md ./
+RUN uv sync --frozen --no-dev --extra dashboard --no-install-project
+
 COPY jarca_ledger_mcp ./jarca_ledger_mcp
 COPY dashboard ./dashboard
-
-RUN python -m pip install --upgrade pip \
-    && python -m pip install '.[dashboard]'
+RUN uv sync --frozen --no-dev --extra dashboard
 
 VOLUME ["/data"]
 EXPOSE 8000 8501