ci: push images to artifactapi registry instead of gitea

Hard switch of the docker push target from the Gitea registry to the
artifactapi local docker registry (docker-internal); the Gitea VM and its
registry are being retired. Drops the droneci/DRONECI_PASSWORD creds since
artifactapi accepts unauthenticated in-cluster pushes. Also repoints the Makefile build/rmi tags.

Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv

.woodpecker/build.yaml

@@ -5,5 +5,5 @@ steps:
   - name: docker-build
     image: woodpeckerci/plugin-docker-buildx
     settings:
-      repo: git.unkin.net/unkin/agent-base
+      repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/agent-base
       dry_run: true

.woodpecker/docker.yaml

@@ -6,11 +6,8 @@ steps:
   - name: docker
     image: woodpeckerci/plugin-docker-buildx
     settings:
-      registry: git.unkin.net
-      repo: git.unkin.net/unkin/agent-base
-      username: droneci
-      password:
-        from_secret: DRONECI_PASSWORD
+      registry: artifactapi.k8s.syd1.au.unkin.net
+      repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/agent-base
       tags:
         - ${CI_COMMIT_TAG}
         - latest

Makefile

@@ -3,10 +3,10 @@
 VERSION ?= $(shell git describe --tags --always --dirty 2>/dev/null || echo "0.0.0-dev")
 
 build:
-	docker build -t git.unkin.net/unkin/agent-base:$(VERSION) .
+	docker build -t artifactapi.k8s.syd1.au.unkin.net/docker-internal/agent-base:$(VERSION) .
 
 clean:
-	docker rmi git.unkin.net/unkin/agent-base:$(VERSION) 2>/dev/null || true
+	docker rmi artifactapi.k8s.syd1.au.unkin.net/docker-internal/agent-base:$(VERSION) 2>/dev/null || true
 
 _LATEST := $(shell git tag --sort=-v:refname | grep -E '^v[0-9]+\.[0-9]+\.[0-9]+$$' | head -1)
 _BASE   := $(if $(_LATEST),$(_LATEST),v0.0.0)