feat: add build workflows

- enable fetch-depth for code_checkout
- fetch master branch before checking for changed files
- ensure the clean target is called with the default
- improve makefile failure handling
- ensure VAULT_ADDR is set before VAULT_TOKEN

ci/build.sh

@@ -21,7 +21,9 @@ if [ -n "$images_changes" ]; then
   echo "Changes detected in images/. Running specific 'make' commands..."
 
   # Extract unique paths for `make` commands
-  for target in $(echo $images_changes | sed -E 's|images/||; s|/[^/]+$||' | sort -u); do
+  export TARGETS=$(echo "$images_changes" | sed -E 's|images/||; s|/[^/]+$||' | sort -u)
+  echo $TARGETS
+  for target in $TARGETS; do
     echo "Running 'make $target'..."
     make "$target"
   done