A hotfix workflow builds the right image but the production deploy still reuses the previous digest

A hotfix release is approved and deployed quickly, but post-deploy checks reveal the cluster still runs the previous image build.