Revert to git.kimchi, add curl diagnostics to understand why
auth fails even after login succeeds.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
The Gitea container registry token service scopes tokens to ROOT_URL
(git.schick-web.site). Pushing to the internal hostname (git.kimchi)
causes auth failures because the token domain doesn't match.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>