fix(artifactapi): move kanidm to dockerhub remote

kanidm/server is published on Docker Hub, not ghcr.io — anonymous ghcr
token fetches were returning 403 causing 502s on pull.

apps/base/artifactapi/resources/conf.d/remote-docker.yaml

@@ -6,7 +6,6 @@ remotes:
     immutable_patterns:
       - "^cloudnative-pg/cloudnative-pg"
       - "^emberstack/helm-charts"
-      - "^kanidm/"
       - "^openvoxproject/"
       - "^stakater/reloader"
       - "^stalwartlabs/stalwart"
@@ -35,6 +34,7 @@ remotes:
       - "^hashicorp/consul"
       - "^hashicorp/vault"
       - "^jfrog/"
+      - "^kanidm/"
       - "^rancher/"
       - "^rspamd/rspamd"
       - "^tozd/postfix"