Please address the comments from this code review:

## Overall Comments
- The startsWith expressions in the version job are reversed – it should be startsWith(github.ref, 'refs/tags/v') instead of startsWith('/refs/tags/v', github.ref) to correctly detect tagged refs.
- Verify that the //go:generate directive reliably invokes the check_changelog.sh script (e.g. prefix with bash and ensure the script is executable) so that go generate runs as expected.
- Double-check that removing the explicit context input from the Build and push Docker image step still uses the intended build context and doesn’t pull in unintended files.

## Individual Comments

### Comment 1
<location> `.github/workflows/release.yml:13` </location>
<code_context>
-  docker:
+
+  version:
+    if: ${{ github.ref == 'refs/heads/main' || startsWith( '/refs/tags/v', github.ref) }}
+    runs-on: ubuntu-latest
+
</code_context>

<issue_to_address>
**issue (bug_risk):** The startsWith function uses a leading slash in the ref argument, which may not match actual tag refs.

Remove the leading slash from the argument in startsWith to match the actual tag ref format and avoid unexpected failures.
</issue_to_address>

### Comment 2
<location> `.github/workflows/release.yml:26-28` </location>
<code_context>
+    steps:
+      - uses: actions/checkout@v5
+
+      - id: tag_check
+        if: ${{ startsWith( '/refs/tags/v', github.ref) }}
+        run: |
+          main_sha=$(git show-ref --verify refs/heads/main | awk '{ print $1 }')
+          if [[ ${{ github.sha }} != $main_sha ]]; then
</code_context>

<issue_to_address>
**issue (bug_risk):** The tag_check step uses '/refs/tags/v' in startsWith, which may not match the actual ref format.

The ref should be 'refs/tags/v' without the leading slash. Please update the string to ensure correct matching.
</issue_to_address>

### Comment 3
<location> `.github/workflows/release.yml:58-60` </location>
<code_context>
+        if: ${{ steps.release_me.outputs.release_me == 'true' }}
+        run: echo "SEMVER=${{ steps.tag_check.outputs.TAG || steps.version_go.outputs.VERSION_GO }}" >> "$GITHUB_OUTPUT"
+
+      - id: create_tag
+        if: ${{ steps.tag_check.outcome == 'skipped' && steps.release_me.outputs.release_me == 'true' }}
+        run: git tag ${{ steps.set_version.outputs.semver }} && git push --tags
+
+  release:
</code_context>

<issue_to_address>
**suggestion:** Directly pushing tags from the workflow may cause issues if the runner does not have the correct permissions or if tags already exist.

Add error handling for cases where the tag already exists or push permissions are missing to prevent workflow failures and ensure consistent state.

```suggestion
      - id: create_tag
        if: ${{ steps.tag_check.outcome == 'skipped' && steps.release_me.outputs.release_me == 'true' }}
        run: |
          TAG="${{ steps.set_version.outputs.semver }}"
          if git rev-parse "$TAG" >/dev/null 2>&1; then
            echo "::warning title=Tag exists::Tag $TAG already exists. Skipping tag creation."
          else
            git tag "$TAG" || { echo "::error title=Tag creation failed::Failed to create tag $TAG"; exit 1; }
            git push --tags || { echo "::error title=Tag push failed::Failed to push tags. Check permissions."; exit 1; }
          fi
```
</issue_to_address>

### Comment 4
<location> `.github/workflows/release.yml:91-100` </location>
<code_context>
+    permissions:
+      contents: write
+
+    outputs:
+      semver: ${{ steps.set_version.outputs.semver }}
+      release_me: ${{ steps.release_me.outputs.release_me }}
</code_context>

<issue_to_address>
**suggestion:** The outputs field in docker/build-push-action is set to local, which may not be necessary for a release workflow.

If local output is unused, removing it can reduce disk usage and speed up the workflow.

Suggested implementation:

```
      - uses: actions/checkout@v5

      # Remove any outputs: local from docker/build-push-action steps below (if present)
      # Example:
      # - name: Build and push Docker image
      #   uses: docker/build-push-action@v5
      #   with:
      #     context: .
      #     push: true
      #     tags: ${{ steps.set_version.outputs.semver }}
      #     # outputs: type=local,dest=./output  <-- REMOVE THIS LINE IF PRESENT

      - id: tag_check
        if: ${{ startsWith( '/refs/tags/v', github.ref) }}
        run: |
          main_sha=$(git show-ref --verify refs/heads/main | awk '{ print $1 }')
          if [[ ${{ github.sha }} != $main_sha ]]; then
            echo "::error title=Not main::Automated releasing is only possible for the head commit on main"

```

If there are any steps using `docker/build-push-action` with an `outputs: type=local,...` field elsewhere in the workflow, remove that field entirely. If you have multiple build steps, repeat this removal for each one. If you need to keep other output types (e.g., `type=registry`), only remove the `type=local` output.
</issue_to_address>