ci: fix lint, add mascot image and GHCR badge

- replace golangci-lint-action with make lint — action uses standard
  binary which lacks the logcheck plugin built by .custom-gcl.yml
- add pivot mascot to .github/assets/ and README (IMP style)
- add GHCR image badge linking to package page

Author: syscod3

.github/assets/pivot.png

@@ -38,9 +38,7 @@ jobs:
           git diff --exit-code || (echo "Run 'make manifests' and commit the result" && exit 1)
 
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v7
-        with:
-          version: v2.8.0
+        run: make lint
 
       - name: Install gitleaks
         run: |

.github/workflows/ci.yml

@@ -3,14 +3,21 @@
 [![CI](https://github.com/syscode-labs/oci-pivot-controller/actions/workflows/ci.yml/badge.svg)](https://github.com/syscode-labs/oci-pivot-controller/actions/workflows/ci.yml)
 [![CodeQL](https://github.com/syscode-labs/oci-pivot-controller/actions/workflows/codeql.yml/badge.svg)](https://github.com/syscode-labs/oci-pivot-controller/actions/workflows/codeql.yml)
 [![Go Version](https://img.shields.io/badge/go-1.25-00ADD8?logo=go)](https://go.dev/doc/devel/release)
+[![Image](https://img.shields.io/github/v/release/syscode-labs/oci-pivot-controller?label=ghcr.io&logo=docker&color=blue)](https://github.com/syscode-labs/oci-pivot-controller/pkgs/container/oci-pivot-controller)
 [![License](https://img.shields.io/badge/license-Apache%202.0-blue.svg)](LICENSE)
 
+<p>
+  <img align="left" src=".github/assets/pivot.png" alt="oci-pivot-controller mascot" width="288" />
+</p>
+
 **oci-pivot-controller is a Kubernetes controller that gives your cluster a stable floating public IP on OCI — and automatically moves it to a healthy node if the current one goes down.**
 
 In plain terms: you create a `PivotIP` resource pointing at a Service, and the controller reserves a real OCI public IP address and wires it up so traffic reaches your app. If the node holding that IP becomes unhealthy, the controller detects it, picks a better node, and re-routes traffic — without you doing anything. The IP address never changes.
 
 It works entirely through OCI's native networking (secondary private IPs + reserved public IPs). No load balancer, no cloud provider integration, no CNI changes required.
 
+<br clear="left" />
+
 ## What It Manages
 
 - `PivotIP`: assigns and maintains a floating OCI reserved public IP for a Kubernetes Service