Debug container registry auth: test v2 and token endpoints

Revert to git.kimchi, add curl diagnostics to understand why
auth fails even after login succeeds.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.gitea/workflows/deploy.yaml

@@ -5,8 +5,8 @@ on:
     branches: [main]
 
 env:
-  REGISTRY: git.schick-web.site
-  IMAGE: git.schick-web.site/tas/major_tom
+  REGISTRY: git.kimchi
+  IMAGE: git.kimchi/tas/major_tom
   NAMESPACE: jnr-web
   DEPLOYMENT: jnr-web
 
@@ -30,6 +30,16 @@ jobs:
 
           CREDS="${{ secrets.REGISTRY_USER }}:${{ secrets.REGISTRY_PASSWORD }}"
 
+          echo "=== debug: test v2 endpoint ==="
+          curl -sk https://git.kimchi/v2/ || true
+          echo ""
+          echo "=== debug: test v2 auth ==="
+          curl -sk -u "$CREDS" https://git.kimchi/v2/ || true
+          echo ""
+          echo "=== debug: test token endpoint ==="
+          curl -sk -u "$CREDS" "https://git.kimchi/v2/token?scope=repository:tas/major_tom:push,pull&service=container_registry" || true
+          echo ""
+
           echo "=== buildah push tag ==="
           buildah push --tls-verify=false --creds "$CREDS" "$IMAGE_TAG"