ci: docker push only after build/clippy/test pass

Add needs: [build, clippy, test] to docker job to ensure
Docker images are only pushed when all checks succeed.

Author: echobt

.github/workflows/ci.yml

@@ -93,10 +93,11 @@ jobs:
           destination_dir: badges
           keep_files: true
 
-  # Docker runs in parallel with Rust jobs (doesn't need Rust build artifacts)
+  # Docker only runs after build, clippy and test pass
   docker:
     name: Docker
     runs-on: platform-runner
+    needs: [build, clippy, test]
     permissions:
       contents: read
       packages: write