Add image manifest mediatype to manifests created by Kit

The manifest mediaType field is optional, but should be included
according to the OCI image specification. The specification also
requires it to be set to 'application/vnd.oci.image.manifest.v1+json'
for manifest-type objects.

Signed-off-by: Angel Misevski <amisevsk@gmail.com>

Bump the actions-minor group across 1 directory with 2 updates

Bumps the actions-minor group with 2 updates in the / directory: [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) and [actions/create-github-app-token](https://github.com/actions/create-github-app-token).


Updates `goreleaser/goreleaser-action` from 7.1.0 to 7.2.2
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](goreleaser/goreleaser-action@e24998b...5daf1e9)

Updates `actions/create-github-app-token` from 3.1.1 to 3.2.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](actions/create-github-app-token@1b10c78...bcd2ba4)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-version: 7.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
- dependency-name: actions/create-github-app-token
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Refine skill name sanitization fallback behavior

Make sanitizeName return empty for invalid/blank input and move
"unnamed-skill" fallback into DeriveSkillName so fallback priority is
preserved before defaulting.

Signed-off-by: Gorkem Ercan <gorkem.ercan@gmail.com>

fix: resolve duplicate Authorization header in release workflow

Checkout with the GitHub App token directly instead of manually
setting http.extraheader after checkout. The previous approach
added a second Authorization header on top of the one persisted
by actions/checkout, causing GitHub to reject git fetches with
HTTP 400.

Signed-off-by: Gorkem Ercan <gorkem.ercan@gmail.com>

Bump Apple-Actions/import-codesign-certs from 4.0.1 to 6.0.0

Bumps [Apple-Actions/import-codesign-certs](https://github.com/apple-actions/import-codesign-certs) from 4.0.1 to 6.0.0.
- [Release notes](https://github.com/apple-actions/import-codesign-certs/releases)
- [Commits](Apple-Actions/import-codesign-certs@2dbeb2d...b610f78)

---
updated-dependencies:
- dependency-name: Apple-Actions/import-codesign-certs
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Sort and deduplicate licenses when collecting from Kitfile

Since we're turning all licenses in a Kitfile into a flat list, it makes
sense to deduplicate them, as repeated licenses do not provide any
additional information.

Signed-off-by: Angel Misevski <amisevsk@gmail.com>

Drop explicit version from setup pnpm action step

The version input is optional when package.json contains a
packageManager field. This avoids the need to keep the version of pnpm
used by actions in sync with the rest of the repository

Signed-off-by: Angel Misevski <amisevsk@gmail.com>

Add KServer Google Artifact Registry instructions

Signed-off-by: Gorkem Ercan <gorkem.ercan@gmail.com>

GKE kserve clusterstoragecontainer integration (#907)

* GKE kserve clusterstoragecontainer integration

* Use py3-google-auth to optimize Docker image

---------

Signed-off-by: Tomasz Bochenski <tomasz.mateusz.bochenski@gmail.com>

Add trace logging to local registry actions

Signed-off-by: Angel Misevski <amisevsk@gmail.com>