CI: Only push container images if possible- Only push to Docker Hub if we can assume that credentials are available (no, you cannot access secrets.DOCKER_PASSWORD in the `if` there)- Push to the GHCR name of the current repo, fixing forks- Also push long SHA labels to easily use them in PR HTML Generator