fix(ci): 🐛 update GHCR image tag retrieval to use GitHub REST API and improve authentication handling

Author: tmeckel

.github/workflows/check-missing-images.yml

@@ -27,11 +27,18 @@ jobs:
 
       - name: Check GHCR for existing images
         id: check_images
+        env:
+          TOKEN: ${{ secrets.GHCR_READ_TOKEN || secrets.GITHUB_TOKEN }}
         run: |
           missing_tags=()
-          # Fetch existing image tags from GHCR using GITHUB_TOKEN for auth
-          ghcr_tags=$(curl -s -H "Authorization: Bearer ${{ secrets.GITHUB_TOKEN }}" \
-              https://ghcr.io/v2/ophiosdev/codex-cli/tags/list | jq -r '.tags[]')
+          # Use GitHub REST API to list container image versions (tags)
+          ghcr_tags=$(curl -sSL \
+              -H "Accept: application/vnd.github+json" \
+              -H "X-GitHub-Api-Version: 2022-11-28" \
+              -H "Authorization: Bearer ${TOKEN}" \
+              https://api.github.com/orgs/ophiosdev/packages/container/codex-cli/versions \
+            | jq -r '.[].metadata.container.tags[]?' 2>/dev/null || true)
+
           echo "Existing GHCR tags: $ghcr_tags"
 
           while IFS= read -r tag; do