fix: add image cleanup and update ci to build image on pr

.github/workflows/ci.yaml

@@ -1,5 +1,10 @@
 name: Quality
 
+permissions:
+  contents: read
+  pull-requests: read
+  packages: write
+
 on:
   push:
     tags:
@@ -14,14 +19,16 @@ on:
       - '.github/**'
   pull_request:
 
-permissions:
-  contents: read
-  pull-requests: read
-
 jobs:
   check:
     uses: openkcm/build/.github/workflows/ci.svc.yaml@main
     with:
       run_task_tests: false
       run_makefile_tests: true
-    secrets: inherit
+    secrets: inherit
+
+  build-pr-image:
+    needs: check
+    if: github.event_name == 'pull_request'
+    uses: openkcm/build/.github/workflows/build-image.pr.svc.yaml@main
+    secrets: inherit

.github/workflows/cleanup-image.yaml

@@ -0,0 +1,16 @@
+name: Nightly PR Image Cleanup
+
+permissions:
+  packages: write
+  contents: read
+
+on:
+  schedule:
+    # Run automatically at 2:00 AM UTC every day
+    - cron: '0 2 * * *'
+  workflow_dispatch: # Allows developers to trigger it manually via the Actions UI
+
+jobs:
+  cleanup-stale-images:
+    uses: openkcm/build/.github/workflows/cleanup-ghcr.yaml@main
+    secrets: inherit