fix: convert third-party image URLs from artifactapi proxies to upstream registries

- nzbget-kids: docker.io/linuxserver/nzbget (was artifactapi/dockerhub)
- radarr-kids exportarr: ghcr.io/onedr0p/exportarr (was artifactapi/ghcr)
- sonarr-kids exportarr: ghcr.io/onedr0p/exportarr (was artifactapi/ghcr)

Kept docker-internal images unchanged per policy.

apps/base/arrstack/nzbget-kids/deployment.yaml

@@ -29,7 +29,7 @@ spec:
         # the image's own template and appends the path/category overrides once;
         # the grep guard keeps re-runs idempotent so admin UI edits survive.
         - name: seed-config
-          image: artifactapi.k8s.syd1.au.unkin.net/dockerhub/linuxserver/nzbget:version-v26.2
+          image: docker.io/linuxserver/nzbget:version-v26.2
           command:
             - sh
             - -c
@@ -84,7 +84,7 @@ spec:
               subPath: movies/kids
       containers:
         - name: nzbget
-          image: artifactapi.k8s.syd1.au.unkin.net/dockerhub/linuxserver/nzbget:version-v26.2
+          image: docker.io/linuxserver/nzbget:version-v26.2
           imagePullPolicy: IfNotPresent
           ports:
             - name: http

apps/base/arrstack/radarr-kids/deployment.yaml

@@ -188,7 +188,7 @@ spec:
         # exportarr sidecar: polls the local replica's API and exposes Prometheus
         # metrics on :9708 (scraped by the radarr-kids-exportarr VMPodScrape).
         - name: exportarr
-          image: artifactapi.k8s.syd1.au.unkin.net/ghcr/onedr0p/exportarr:v2.3.0
+          image: ghcr.io/onedr0p/exportarr:v2.3.0
           imagePullPolicy: IfNotPresent
           args:
             - radarr

apps/base/arrstack/sonarr-kids/deployment.yaml

@@ -188,7 +188,7 @@ spec:
         # exportarr sidecar: polls the local replica's API and exposes Prometheus
         # metrics on :9707 (scraped by the sonarr-kids-exportarr VMPodScrape).
         - name: exportarr
-          image: artifactapi.k8s.syd1.au.unkin.net/ghcr/onedr0p/exportarr:v2.3.0
+          image: ghcr.io/onedr0p/exportarr:v2.3.0
           imagePullPolicy: IfNotPresent
           args:
             - sonarr