Dockerfile takes ARG VERSION (default "dev") and stamps it into main.version with -X. CD passes --build-arg VERSION=<git tag on v* builds, else the short sha>, so the running pod logs the actual build instead of "dev". Verified locally: `-ldflags -X main.version=...` embeds the string. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>