fix: Use external registry URL for proper Bearer token auth

Gitea's container registry uses Bearer token auth with realm pointing
to external URL. Changed from internal K8s service URL to
registry.lab.daviestechlabs.io for proper auth flow.

Also removed insecure registry buildx config since using HTTPS now.

.gitea/workflows/build-push.yaml

@@ -23,9 +23,9 @@ on:
         default: 'all'
 
 env:
-  # Use internal K8s service URL for container registry (runner is in-cluster)
-  REGISTRY: gitea-http.gitea.svc.cluster.local:3000/daviestechlabs
-  REGISTRY_HOST: gitea-http.gitea.svc.cluster.local:3000
+  # Use external registry URL for proper Bearer token auth flow
+  REGISTRY: registry.lab.daviestechlabs.io/daviestechlabs
+  REGISTRY_HOST: registry.lab.daviestechlabs.io
   NTFY_URL: http://ntfy.observability.svc.cluster.local:80
 
 jobs:
@@ -101,10 +101,8 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
         with:
-          # Configure buildx to use HTTP for internal registry
           buildkitd-config-inline: |
-            [registry."gitea-http.gitea.svc.cluster.local:3000"]
-              http = true
+            [registry."registry.lab.daviestechlabs.io"]
               insecure = true
 
       # Login to Docker Hub to avoid pull rate limits
@@ -159,8 +157,7 @@ jobs:
         uses: docker/setup-buildx-action@v3
         with:
           buildkitd-config-inline: |
-            [registry."gitea-http.gitea.svc.cluster.local:3000"]
-              http = true
+            [registry."registry.lab.daviestechlabs.io"]
               insecure = true
 
       - name: Login to Docker Hub
@@ -213,8 +210,7 @@ jobs:
         uses: docker/setup-buildx-action@v3
         with:
           buildkitd-config-inline: |
-            [registry."gitea-http.gitea.svc.cluster.local:3000"]
-              http = true
+            [registry."registry.lab.daviestechlabs.io"]
               insecure = true
 
       - name: Login to Docker Hub
@@ -267,8 +263,7 @@ jobs:
         uses: docker/setup-buildx-action@v3
         with:
           buildkitd-config-inline: |
-            [registry."gitea-http.gitea.svc.cluster.local:3000"]
-              http = true
+            [registry."registry.lab.daviestechlabs.io"]
               insecure = true
 
       - name: Login to Docker Hub