ci: re-enable image build after Rust-to-Go migration

[Copilot]

The legacy Rust codebase (Cargo.toml, Cargo.lock, src/) was removed in favor of the Go-only exporter, but the OCI image build was temporarily disabled during that migration. This completes the cleanup by restoring the image build step.

Changes

• Re-enable image build in CI — Uncomments the image: job in ci.yaml that was marked as "temporary disable" in the migration PR. The Nix flake already builds via pkgs.buildGoModule; the job was simply gated off during transition.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• 192.0.2.1
  • Triggering command: /tmp/go-build424761624/b506/db.test /tmp/go-build424761624/b506/db.test -test.paniconexit0 -test.timeout=10m0s -test.count=1 -test.short=true 0.1-go1.25.5.lin. mpile 0.1-go1.25.5.lin--64 ryYg/eOtu-P81vlK/home/REDACTED/go/pkg/mod/golang.org/[email protected]/pkg/too-buildtags -Wl,--no-gc-sect-o m 0.1-go1.25.5.lin-trimpath -o ux-amd64/src/os/-p m ux-amd64/pkg/tool/linux_amd64/compile bFhU/S1M7AHFAanu/home/REDACTED/go/pkg/mod/golang.org/[email protected]/pkg/too-trimpath google.golang.or-atomic m ux-amd64/pkg/too-buildtags (packet block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.