Add artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx (built
by unkin/plugin-docker-buildx) to WOODPECKER_PLUGINS_PRIVILEGED so in-house repos
can push to the internal-CA artifactapi registry without the x509 failure. The
upstream entries stay listed so existing repos keep working until they migrate.