Update Docker publish workflow and README

Workflow: remove `pangolin` branch, require actor != github-actions[bot] to avoid bot recursion, and change `contents` permission to write so the job can push README updates. Add steps (only for non-PR branch refs) to build an amd64 image for size calculation, compute a human-readable image size, update the README marker <!-- IMAGE_SIZE_START -->...<!-- IMAGE_SIZE_END -->, and commit/push the change as github-actions[bot] (with a skip-ci message).

README: bump baseline to 2.3.1, update multi-proxy image reference, and insert the computed Docker image size placeholder (41MB in this diff).

Author: hhftechnology

.github/workflows/docker-publish.yml

@@ -5,7 +5,20 @@ on:
     branches:
       - main
       - dev
-      - pangolin
+    paths:
+      - 'Dockerfile'
+      - '.github/workflows/docker-publish.yml'
+      - 'web/**'
+      - 'internal/**'
+      - 'cmd/**'
+      - 'config/**'
+      - 'scripts/**'
+      - 'go.mod'
+      - 'go.sum'
+      - '*.go'
+      - 'data/**'
+      - 'docs/**'
+
     tags:
       - 'v*'
   pull_request:
@@ -17,9 +30,10 @@ env:
 
 jobs:
   build-and-push:
+    if: github.actor != 'github-actions[bot]'
     runs-on: ubuntu-latest
     permissions:
-      contents: read
+      contents: write
       packages: write
 
     steps:
@@ -76,3 +90,47 @@ jobs:
           cache-from: type=gha
           cache-to: type=gha,mode=max
           platforms: linux/amd64,linux/arm64
+
+      - name: Build image for size calculation (linux/amd64)
+        if: github.event_name != 'pull_request' && startsWith(github.ref, 'refs/heads/')
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: ./Dockerfile
+          push: false
+          load: true
+          tags: local/${{ env.IMAGE_NAME }}:size-${{ github.sha }}
+          cache-from: type=gha
+          platforms: linux/amd64
+
+      - name: Calculate image size
+        if: github.event_name != 'pull_request' && startsWith(github.ref, 'refs/heads/')
+        id: image_size
+        shell: bash
+        run: |
+          IMAGE_REF="local/${{ env.IMAGE_NAME }}:size-${{ github.sha }}"
+          SIZE_BYTES="$(docker image inspect "${IMAGE_REF}" --format='{{.Size}}')"
+          SIZE_HUMAN="$(numfmt --to=iec --suffix=B "${SIZE_BYTES}")"
+          echo "Computed image size: ${SIZE_HUMAN}"
+          echo "size_human=${SIZE_HUMAN}" >> "${GITHUB_OUTPUT}"
+
+      - name: Update README image size
+        if: github.event_name != 'pull_request' && startsWith(github.ref, 'refs/heads/')
+        shell: bash
+        run: |
+          SIZE="${{ steps.image_size.outputs.size_human }}"
+          sed -i -E "s|(<!-- IMAGE_SIZE_START -->)[^<]*(<!-- IMAGE_SIZE_END -->)|\1${SIZE}\2|" README.md
+
+      - name: Commit README image size update
+        if: github.event_name != 'pull_request' && startsWith(github.ref, 'refs/heads/')
+        shell: bash
+        run: |
+          if git diff --quiet -- README.md; then
+            echo "README image size is already up to date"
+            exit 0
+          fi
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git add README.md
+          git commit -m "chore(readme): update image size [skip ci]"
+          git push

README.md

@@ -14,8 +14,9 @@ CrowdSec Manager is a web-based management interface for CrowdSec operations, Tr
 
 ## Stable release
 
-- Current baseline: `2.3.0`
-- Multi-proxy support: not available in this release
+- Current baseline: `2.3.1`
+- Multi-proxy support: hhftechnology/crowdsec-manager:independent
+- Docker image size (linux/amd64): <!-- IMAGE_SIZE_START -->41MB<!-- IMAGE_SIZE_END -->
 
 ### Crowdsec-Manager mobile app.