WIP container cleanup script

.github/workflows/container-cleanup.yml

@@ -0,0 +1,31 @@
+name: Container Cleanup
+
+permissions:
+  contents: read
+
+on:
+  pull_request:
+
+jobs:
+  cleanup:
+    runs-on: ubuntu-latest
+    steps:
+        - name: Get a list of untagged docker images
+          uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea
+          with:
+            script: |
+                const versions = await github.rest.packages.getAllPackageVersionsForPackageOwnedByOrg({
+                    package_type: 'container',
+                    package_name: 'debian',
+                    org: context.repo.owner,
+                    per_page: 100,
+                    state: 'active',
+                });
+                const to_remove = [];
+                for (const p of versions.data) {
+                  if ((p.metadata?.container?.tags ?? []).length === 0) {
+                    to_remove.push(p.name);
+                  }
+                }
+                console.log(`Found ${to_remove.length} untagged container images to remove`);
+