9ff0585454
Dockerfile: - Drop --mount=type=secret,id=cargo_token: the Quaternions private registry has been migrated to the public Cargo.io path so the build secret is no longer needed. Removes the requirement for CI_TOKEN to carry registry credentials. CI workflow (docker-build.yml): - Add solitaire_wasm/** and solitaire_web/** to the push-trigger paths so changes to either WASM crate actually fire the build job. - Add wasm drift check for solitaire_wasm artifacts (solitaire_wasm.js, solitaire_wasm_bg.wasm) — exits 1 if solitaire_wasm/ or solitaire_core/ changed without updating the committed pkg files. - Add hard canvas drift check: solitaire_web/ changes MUST update canvas_bg.wasm or the deploy gets a stale Bevy binary. - Add advisory notice for solitaire_engine/ / solitaire_core/ changes that omit a canvas_bg.wasm rebuild (non-blocking; formatting commits should not fail CI). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>