feat: publish root Dockerfile to our image registry (#599)

.gcp/dogfood.yaml

@@ -1,8 +1,10 @@
 steps:
+  # Step 1: Install root dependencies (includes workspaces)
   - name: 'us-west1-docker.pkg.dev/gemini-code-dev/gemini-code-containers/gemini-code-builder'
     entrypoint: 'npm'
     args: ['install']
 
+  # Step 2: Update version with build suffix
   - name: 'us-west1-docker.pkg.dev/gemini-code-dev/gemini-code-containers/gemini-code-builder'
     entrypoint: 'npm'
     args:
@@ -14,22 +16,33 @@ steps:
         '--suffix="$SHORT_SHA.$_REVISION"',
       ]
 
+  # Step 3: Bind dependencies to the new versions
   - name: 'us-west1-docker.pkg.dev/gemini-code-dev/gemini-code-containers/gemini-code-builder'
     entrypoint: 'npm'
     args: ['run', 'prerelease:deps', '--workspaces']
 
-  # A bit of a hack to get the .npmrc into the Dockerfile.sandbox. Should probably streamline this.
-  - name: 'us-west1-docker.pkg.dev/gemini-code-dev/gemini-code-containers/gemini-code-builder'
-    entrypoint: 'cp'
-    args: ['/workspace/.npmrc', '/builder/home/.npmrc']
-
+  # Step 4: Authenticate for Docker and NPM
   - name: 'us-west1-docker.pkg.dev/gemini-code-dev/gemini-code-containers/gemini-code-builder'
     entrypoint: 'npm'
     args: ['run', 'auth']
 
+  # Step 5: Run the master release script
   - name: 'us-west1-docker.pkg.dev/gemini-code-dev/gemini-code-containers/gemini-code-builder'
     entrypoint: 'npm'
-    args: ['publish', '--tag=head', '--workspace=@gemini-code/cli']
+    args: ['run', 'publish:release']
+    env:
+      - 'GEMINI_SANDBOX=$_CONTAINER_TOOL'
+      - 'SANDBOX_IMAGE_REGISTRY=$_SANDBOX_IMAGE_REGISTRY'
+      - 'SANDBOX_IMAGE_NAME=$_SANDBOX_IMAGE_NAME'
+      - 'NPM_PUBLISH_TAG=$_NPM_PUBLISH_TAG'
 
 options:
   defaultLogsBucketBehavior: REGIONAL_USER_OWNED_BUCKET
+  dynamicSubstitutions: true
+
+substitutions:
+  _REVISION: '0'
+  _SANDBOX_IMAGE_REGISTRY: 'us-west1-docker.pkg.dev/gemini-code-dev/gemini-code-containers'
+  _SANDBOX_IMAGE_NAME: 'gemini-cli-sandbox'
+  _NPM_PUBLISH_TAG: 'head'
+  _CONTAINER_TOOL: 'docker'