feat: Add automated GHCR package visibility setting

Adds a step to automatically set GHCR package visibility to public
after pushing Docker images. This ensures the package is publicly
accessible without manual intervention.

Uses continue-on-error to fail gracefully if permissions are insufficient,
with a helpful message directing to the manual settings page.

This addresses the issue where GHCR packages default to private visibility.

Author: jamesbrink

.github/workflows/publish.yml

@@ -166,3 +166,17 @@ jobs:
         cache-from: type=gha
         cache-to: type=gha,mode=max
         platforms: linux/amd64,linux/arm64
+
+    - name: Make GHCR package public
+      continue-on-error: true
+      run: |
+        echo "Setting GHCR package visibility to public..."
+        # Note: This requires the workflow to have admin permissions on the package
+        # If the package doesn't exist yet or permissions are insufficient, this will fail gracefully
+        gh api --method PATCH \
+          -H "Accept: application/vnd.github+json" \
+          -H "X-GitHub-Api-Version: 2022-11-28" \
+          "/orgs/utensils/packages/container/mcp-nixos" \
+          -f visibility=public || echo "Could not set visibility via API. Please set manually at: https://github.com/orgs/utensils/packages/container/mcp-nixos/settings"
+      env:
+        GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}