ci: fix GHCR API endpoint for reading package versions

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>

Author: sisyphus-dev-ai

.github/workflows/check-upstream-release.yml

@@ -42,15 +42,16 @@ jobs:
           # Fetch latest upstream version
           UPSTREAM_VERSION="${{ steps.upstream.outputs.version }}"
           
-          # Query GHCR for existing image tags
-          # Need package:read permission for this
+          # Query GHCR for existing image tags - use repo-level packages API
           TAGS_RESPONSE=$(curl -s -H "Accept: application/vnd.github+json" \
             -H "Authorization: Bearer ${{ secrets.GITHUB_TOKEN }}" \
             -H "X-GitHub-Api-Version: 2022-11-28" \
-            "https://api.github.com/orgs/${{ github.repository_owner }}/packages/container/${{ github.repository }}/versions")
+            "https://api.github.com/repos/${{ github.repository }}/packages/container/opencode-server-docker/versions")
+          
+          echo "GHCR response: $TAGS_RESPONSE"
           
           # Find the latest upstream-* tag
-          CURRENT_VERSION=$(echo "$TAGS_RESPONSE" | jq -r '.[] | select(.metadata.container.tags[]? | startswith("upstream-")) | .metadata.container.tags[]' 2>/dev/null | head -1 | sed 's/upstream-//')
+          CURRENT_VERSION=$(echo "$TAGS_RESPONSE" | jq -r '.[] | .metadata.container.tags[]' 2>/dev/null | grep '^upstream-' | head -1 | sed 's/upstream-//')
           
           echo "Current built version: $CURRENT_VERSION"
           echo "Latest upstream version: $UPSTREAM_VERSION"