Please address the comments from this code review:

## Overall Comments
- The workflow never checks out the repository before building, so `docker/build-push-action` will build from an empty context; add an `actions/checkout` step before the build.
- The Docker login step runs unconditionally and will fail for PRs from forks where `REGISTRY_USER`/`REGISTRY_TOKEN` secrets are unavailable; consider skipping login (and any push-related behavior) on `pull_request` events from forks.
- In the `docker/metadata-action` configuration, `branch=$repo.default_branch` is not a standard expression for this action; replace it with a concrete branch name (e.g., `branch=main`) or a supported context to ensure edge tags are generated correctly.

## Individual Comments

### Comment 1
<location> `.github/workflows/Docker.yml:33-34` </location>
<code_context>
+          username: ${{ secrets.REGISTRY_USER }}
+          password: ${{ secrets.REGISTRY_TOKEN }}
+      
+      - name: Setup Docker buildx
+        uses: docker/setup-buildx-action@v3
+
+      # Extract metadata (tags, labels) for Docker
</code_context>

<issue_to_address>
**issue (bug_risk):** The workflow never checks out the repository before building the Docker image

Because there’s no `actions/checkout` step, the repository files are never present on the runner, so `docker/build-push-action`’s default build context will be essentially empty and the Docker build may fail or produce a broken image. Add a checkout step (e.g. `uses: actions/checkout@v4`) before setting up Buildx so the build context includes the repo contents.
</issue_to_address>

### Comment 2
<location> `.github/workflows/Docker.yml:44-45` </location>
<code_context>
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          labels: |
+            org.opencontainers.image.revision=${{ env.SHA }}
+          tags: |
+            type=edge,branch=$repo.default_branch
+            type=semver,pattern=v{{version}}
+            type=sha,prefix=,suffix=,format=short
</code_context>

<issue_to_address>
**issue (bug_risk):** The `type=edge` tag configuration uses an undefined `$repo.default_branch` variable

`docker/metadata-action` does not support `$repo.default_branch` and will treat it as a literal string, so the edge tag won’t work as intended. Use the actual default branch instead (e.g. `type=edge,branch=main`) or one of the action’s supported templates (e.g. `{{branch}}`), aligned with your repo’s true default branch.
</issue_to_address>