e25762107d
kanidm/server is published on Docker Hub, not ghcr.io — anonymous ghcr token fetches were returning 403 causing 502s on pull.