Move self-hosted MCP Docker Hub publish to backend

Author: rodion-m

.github/workflows/ci.yml

@@ -9,7 +9,6 @@ on:
 env:
   DOCKER_REGISTRY: ghcr.io
   IMAGE_NAME: ghcr.io/codealive-ai/codealive-mcp
-  DOCKERHUB_IMAGE: ivanbirukcodealive/codealive_ai
 
 permissions:
   contents: read
@@ -93,15 +92,6 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Login to Docker Hub
-        id: dockerhub_login
-        if: github.event_name == 'push'
-        continue-on-error: true
-        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
       # PR: build only (no push) to validate Dockerfile — single platform for speed
       - name: Build Docker image (PR validation)
         if: github.event_name == 'pull_request'
@@ -129,21 +119,3 @@ jobs:
             org.opencontainers.image.revision=${{ github.sha }}
           cache-from: type=gha
           cache-to: type=gha
-
-      # Docker Hub is a secondary self-hosted distribution channel. Missing
-      # credentials must not block GHCR, because production pulls from GHCR.
-      - name: Build and push Docker image (Docker Hub)
-        if: github.event_name == 'push' && steps.dockerhub_login.outcome == 'success'
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
-        with:
-          push: true
-          platforms: linux/amd64,linux/arm64
-          file: ./Dockerfile
-          tags: |
-            ${{ env.DOCKERHUB_IMAGE }}:mcp-dev
-            ${{ env.DOCKERHUB_IMAGE }}:mcp-sha-${{ github.sha }}
-          labels: |
-            io.modelcontextprotocol.server.name=io.github.CodeAlive-AI/codealive-mcp
-            org.opencontainers.image.revision=${{ github.sha }}
-          cache-from: type=gha
-          cache-to: type=gha

.github/workflows/release.yml

@@ -20,8 +20,6 @@ on:
 env:
   DOCKER_REGISTRY: ghcr.io
   IMAGE_NAME: ghcr.io/codealive-ai/codealive-mcp
-  # Self-hosted customers get MCP from Docker Hub alongside backend images.
-  DOCKERHUB_IMAGE: ivanbirukcodealive/codealive_ai
 
 permissions:
   id-token: write   # MCP Registry OIDC authentication
@@ -148,19 +146,6 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      # Docker Hub publish is a secondary distribution channel for self-hosted
-      # customers. Treat it as best-effort: missing credentials must NOT block
-      # the primary release path (GHCR push, MCP Registry publish, git tag,
-      # GitHub Release). Configure DOCKERHUB_USERNAME / DOCKERHUB_TOKEN in the
-      # `release` environment to re-enable.
-      - name: Login to Docker Hub (self-hosted distribution)
-        id: dockerhub_login
-        continue-on-error: true
-        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
       - name: Build and push Docker image (GHCR)
         uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
         with:
@@ -179,23 +164,6 @@ jobs:
           cache-from: type=gha
           cache-to: type=gha
 
-      - name: Build and push Docker image (Docker Hub)
-        if: steps.dockerhub_login.outcome == 'success'
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
-        with:
-          push: true
-          platforms: linux/amd64,linux/arm64
-          file: ./Dockerfile
-          build-args: VERSION=${{ steps.version.outputs.version }}
-          tags: |
-            ${{ env.DOCKERHUB_IMAGE }}:mcp
-            ${{ env.DOCKERHUB_IMAGE }}:mcp-v${{ steps.version.outputs.version }}
-            ${{ env.DOCKERHUB_IMAGE }}:mcp-sha-${{ github.sha }}
-          labels: |
-            io.modelcontextprotocol.server.name=io.github.CodeAlive-AI/codealive-mcp
-            org.opencontainers.image.revision=${{ github.sha }}
-          cache-from: type=gha
-
       # Git tag created AFTER Docker push succeeds — if Docker fails, no stale tag
       - name: Create and push git tag
         run: |