feat(ci): add nightly build workflow for S3 + DockerHub publishing

[sangli-pensando]

Summary

Adds a nightly build pipeline for KMM that builds all 4 container images, publishes to S3 and DockerHub, and runs validation. Uses shared reusable workflows from ROCm/common-infra-operator — no local publish or summary workflows needed.

Workflow Architecture

nightly-build.yml (orchestrator)
  init                    — reads VERSION from Makefile
  nightly-resolve.yml     — date-based tagging, dedup, commit log (shared)
  build-images.yml        — all 4 container images
  rocm-publish.yml        — S3 upload + DockerHub push (shared)
  rocm-orchestrator.yml   — validation (shared)
  nightly-summary.yml     — stage results + commit history (shared)

All shared workflows from ROCm/common-infra-operator, SHA-pinned to 71da675.

Artifacts Published (nightly)

Artifact	S3	DockerHub
kernel-module-management-operator	*.tar.gz	amdpsdo/kernel-module-management-operator:{VER}-{DATE}
kernel-module-management-signimage	*.tar.gz	amdpsdo/kernel-module-management-signimage:{VER}-{DATE}
kernel-module-management-webhook-server	*.tar.gz	amdpsdo/kernel-module-management-webhook-server:{VER}-{DATE}
kernel-module-management-worker	*.tar.gz	amdpsdo/kernel-module-management-worker:{VER}-{DATE}

S3 path: s3://THEROCK_BUCKET_NAME/kernel-module-management/nightly/{YYYYMMDD}/

Schedule

Daily at 1:00 PM UTC (6:00 AM PDT) + manual workflow_dispatch.

Validation Results (PR)

All stages passed on PR:

• Init: pass (5s)
• Resolve (shared nightly-resolve.yml): pass (5s)
• Build Images: pass (4m16s)
• Publish: skipped (PR event, no secrets)
• Validate: skipped (depends on publish)
• Summary (shared nightly-summary.yml): pass

Local Validation

Build script tested locally — all 4 images built successfully:

• kernel-module-management-operator.tar.gz (33MB)
• kernel-module-management-signimage.tar.gz (3.4MB)
• kernel-module-management-webhook-server.tar.gz (31MB)
• kernel-module-management-worker.tar.gz (27MB)

Files Changed

New files:

• .github/workflows/nightly-build.yml — orchestrator
• .github/workflows/build-images.yml — reusable image build
• .github/scripts/build-images.sh — build script

Does NOT touch existing workflows (ci.yml, weekly-build.yml).

Test plan

• Build script validated locally — all 4 images built
• PR triggers workflow — all build stages pass
• Post-merge: trigger via workflow_dispatch and verify full pipeline
• Verify artifacts appear in S3 under kernel-module-management/nightly/{DATE}/
• Verify images pushed to docker.io/amdpsdo/ with correct tags