feat(ci): 集成 Harbor 镜像仓库

- 使用 secrets.IMAGE_REGISTRY 配置仓库地址
- 使用 Harbor Robot 账号进行镜像推送认证
- Knative Service 添加 harbor-registry-secret 拉取认证
- 支持动态替换镜像仓库地址和标签占位符

deploy/k8s/api-ksvc.yaml

@@ -16,10 +16,12 @@ spec:
         # 每个实例的并发请求数
         autoscaling.knative.dev/target: "100"
     spec:
+      imagePullSecrets:
+        - name: harbor-registry-secret
       containerConcurrency: 0
       containers:
         - name: api
-          image: gitea.tegical.world/tegical/seclusion-api:IMAGE_TAG_PLACEHOLDER
+          image: IMAGE_REGISTRY_PLACEHOLDER/tegical/seclusion-api:IMAGE_TAG_PLACEHOLDER
           ports:
             - containerPort: 4000
           envFrom:

deploy/k8s/web-ksvc.yaml

@@ -16,10 +16,12 @@ spec:
         # 每个实例的并发请求数
         autoscaling.knative.dev/target: "100"
     spec:
+      imagePullSecrets:
+        - name: harbor-registry-secret
       containerConcurrency: 0
       containers:
         - name: web
-          image: gitea.tegical.world/tegical/seclusion-web:IMAGE_TAG_PLACEHOLDER
+          image: IMAGE_REGISTRY_PLACEHOLDER/tegical/seclusion-web:IMAGE_TAG_PLACEHOLDER
           ports:
             - containerPort: 3000
           envFrom: