fix docker label for non latest image

* Also adds QEMU and buildx as recommended in https://github.com/docker/build-push-action?tab=readme-ov-file#usage

.github/workflows/publish.yml

@@ -47,8 +47,12 @@ jobs:
       - uses: DeterminateSystems/flake-checker-action@main
       - name: Build image
         run: nix build .#dockerImage
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
       - name: Log in to the Container registry
-        uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
+        uses: docker/login-action@v3
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
@@ -64,5 +68,5 @@ jobs:
           docker load --input result
           docker tag pii:latest ${{ format('{0}/{1}:latest', env.REGISTRY, env.IMAGE_NAME) }}
           docker push ${{ format('{0}/{1}:latest', env.REGISTRY, env.IMAGE_NAME) }}
-          docker tag pii:latest ${{ format('{0}/{1}:{2}', env.REGISTRY, env.IMAGE_NAME, steps.meta.outputs.tags) }}
-          docker push ${{ format('{0}/{1}:{2}', env.REGISTRY, env.IMAGE_NAME, steps.meta.outputs.tags) }}
+          docker tag pii:latest ${{ steps.meta.outputs.tags }}
+          docker push ${{ steps.meta.outputs.tags }}