chore(devcontainer): temporarily disable auto-publish workflow trigger

microsoft org GHCR policy blocks first-time package creation under
ghcr.io/microsoft/apm/* for both GITHUB_TOKEN and member PATs (read
allowed, write returns no WWW-Authenticate). Working on org bootstrap
via the microsoft/opensource process; until that completes the publish
job will fail and add red noise to every push to main.

Comment out the push trigger but keep workflow_dispatch so we can
validate the bootstrap with a single manual run the moment policy is
granted, without another commit. Tag-fanout (1, 1.0, 1.0.0, latest)
and the rest of the workflow body are unchanged.

Follow-up to #861.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: danielmeppiel

.github/workflows/devcontainer-feature-publish.yml

@@ -22,12 +22,26 @@ name: Devcontainer Feature - Publish
 # run): GHCR -> packages -> apm-cli -> Package settings -> change visibility
 # to Public, then "Manage Actions access" -> add microsoft/apm with Write.
 
+# --------------------------------------------------------------------------
+# TEMPORARILY DISABLED auto-publish on push.
+#
+# microsoft org GHCR policy blocks first-time package creation under
+# `ghcr.io/microsoft/apm/*` for both GITHUB_TOKEN and member PATs (read
+# allowed, write returns no WWW-Authenticate). Working on org bootstrap
+# via the microsoft/opensource process.
+#
+# Status: tracked alongside #861 follow-up. Re-enable the `push:` trigger
+# once `ghcr.io/microsoft/apm/apm-cli` is provisioned and linked to this
+# repo. Until then, the only way to publish is `workflow_dispatch`, which
+# also currently fails the same way -- left in place so we can validate
+# the bootstrap with a manual run the moment policy is granted.
+# --------------------------------------------------------------------------
 on:
-  push:
-    branches: [ main ]
-    paths:
-      - 'devcontainer/src/**'
-      - '.github/workflows/devcontainer-feature-publish.yml'
+  # push:
+  #   branches: [ main ]
+  #   paths:
+  #     - 'devcontainer/src/**'
+  #     - '.github/workflows/devcontainer-feature-publish.yml'
   workflow_dispatch:
 
 permissions: