b172b6a319
Build: Production / build (push) Successful in 6m41s
Gitea's docker login is lenient and accepts the org name as a username at handshake time, but the per-scope token exchange that buildkit performs for blob operations needs to resolve a real user identity. Using admin (the user that owns REGISTRY_TOKEN) prevents 401s on blob HEAD requests during push. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>