Apply cipher suite fix for Reddit TLS fingerprinting and add GHCR publishing

[Copilot]

Reddit now fingerprints and blocks requests based on rustls's default cipher suite ordering. This implements the workaround from upstream PR redlib-org#510 and adds automated multi-arch Docker image publishing to GHCR.

Changes

TLS Fingerprinting Fix

• Match Firefox 145.0 cipher suite configuration in src/client.rs
• Reorder TLS 1.3 and 1.2 cipher suites to avoid detection pattern
• Add rustls = "0.21.12" dependency for explicit cipher configuration

pub static HTTPS_CONNECTOR: LazyLock<HttpsConnector<HttpConnector>> = LazyLock::new(|| {
    hyper_rustls::HttpsConnectorBuilder::new()
        .with_tls_config(
            rustls::ClientConfig::builder()
                .with_cipher_suites(&[
                    rustls::cipher_suite::TLS13_AES_256_GCM_SHA384,
                    rustls::cipher_suite::TLS13_AES_128_GCM_SHA256,
                    // ... Firefox cipher suite order
                ])
                // ...
        )
        // ...
});

GHCR Publishing Workflow

• Multi-arch builds (amd64, arm64, armv7) via .github/workflows/ghcr.yml
• Digest-based manifest creation for platform-specific images
• Build from source using Dockerfile.build (multi-stage Alpine-based)
• Auto-publish on push to main, version tags, and manual dispatch
• Fixed CVE in actions/download-artifact (updated to v4.1.8)

Documentation

• DOCKER.md - Container usage and multi-arch details
• DEPLOYMENT.md - Post-merge verification steps
• Updated README.md with quick start for this fork

Post-Merge

Images will be available at ghcr.io/mitchross/redlib:latest with automatic builds on push.

Original prompt

read thru this issue from latest pots up, make the change that works , apoply to my fork and create a ghcr package / github action

redlib-org#446

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[mitchross]

actions are failing