Update Docker workflow

[markducks]

This pull request updates the Docker image build and push workflow to improve image tagging, naming, and security practices. The most important changes are grouped below:

Docker Image Tagging and Naming Improvements:

• Changed the Docker image name from loideunical/loide:ese to loideunical/loide-ese.
• Enhanced tagging by adding semantic version (semver) and latest tags.
• Updated the build and push step to use dynamically generated tags and labels from the metadata action.

Build Process Enhancements:

• Passed the current GitHub ref name as the APP_VERSION build argument to the Docker build, enabling versioning within the image.

Security and Permissions:

• Added contents: read permissions to the workflow job, following GitHub Actions best practices for least privilege.