fix: remove DinD/GHCR split to fix Docker socket and infra 403 [CAR-987]
Consolidates build+push into single step (no DinD socket needed).
Switches infra checkout to secrets.GITEA_DEPLOY_KEY for cross-repo access.
Co-Authored-By: Paperclip <noreply@paperclip.ing>