[dbpolito]

Use the shared Bash/jq native-image actions and reusable publisher from kool-dev/kool#549, pinned to e06584d9fc7de69f4e3a9811d64a9f691f592b6b.

• Keep image-specific builds/tests/scanners here; share the native Docker builder, tested-parent ID/layer check, run-scoped digest staging, complete-matrix validation and manifest-only publication.
• Remove Python CI/release tooling. Capture push digests directly without redundant remote inspections. No resume workflow or cross-attempt reuse; failed releases still require all jobs.
• Preserve supported tags/architectures, release guards and downstream ordering. Stable tags use the common index path, including one-platform indexes for amd64-only images.

Merge the shared kool tooling first, then receivers before PHP. PRs do not log in, stage, publish or dispatch. Production credential/artifact/dispatch verification remains a rollout step; no production publication has been performed for this change.