remove zgoat and use non :latest patching

.github/workflows/github-bot.yml

@@ -16,6 +16,8 @@ permissions:
 jobs:
   docker-push:
     runs-on: ubuntu-latest
+    outputs:
+      image_digest: ${{ steps.docker_push.outputs.digest }}
     permissions:
       contents: read
       packages: write
@@ -36,6 +38,7 @@ jobs:
         uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3.7.1
 
       - name: Build and push
+        id: docker_push
         uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6.10.0
         with:
           context: .
@@ -68,4 +71,4 @@ jobs:
       - name: Deploy updates
         env:
           TACHI_HOST: ${{ secrets.TACHI_HOST }}
-        run: ssh "ci@${TACHI_HOST}" /opt/tachi/deploy/scripts/deploy-ghbot.sh
+        run: ssh "ci@${TACHI_HOST}" "/opt/tachi/deploy/scripts/deploy-ghbot.sh ${{ needs.docker-push.outputs.image_digest }}"