This was supposed to land in d63f195 but the prior Write didn't apply. CI now runs unit + integration tests on every push and PR ; the docker image is only pushed on main, after tests pass.
d63f195