Use external hostname for container registry push

The Gitea container registry token service scopes tokens to ROOT_URL
(git.schick-web.site). Pushing to the internal hostname (git.kimchi)
causes auth failures because the token domain doesn't match.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.gitea/workflows/deploy.yaml

@@ -5,8 +5,8 @@ on:
     branches: [main]
 
 env:
-  REGISTRY: git.kimchi
-  IMAGE: git.kimchi/tas/major_tom
+  REGISTRY: git.schick-web.site
+  IMAGE: git.schick-web.site/tas/major_tom
   NAMESPACE: jnr-web
   DEPLOYMENT: jnr-web