The README now covers both workflows: what the REGISTRY_TOKEN secret is for, why the release only fires on a tag, and the three commands to cut a release. `build-and-publish-unraid.sh` still defaulted to IMAGE_TAG=0.1.0 and GIT_REF=v0.1, which would have built a two-release-old tag by hand and pushed it as the current one. Both now point at 0.1.3.