Split push-images and upload-scan-results into per-image steps so each chain (build → scan → upload → push) is fully self-contained. Fixes Woodpecker "depends on unknown step" error when path filters remove steps from the pipeline. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>