fd7f63afa1
kanidm/server is on Docker Hub; ghcr.io requires auth. RKE2 rewrites dockerhub pulls through the artifactapi mirror automatically.