Publish branch builds under immutable commit SHA tags, then promote the released image to its version tag and stable releases to latest.