Hard switch of the docker push target from the Gitea registry to the
artifactapi local docker registry (docker-internal); the Gitea VM and its
registry are being retired. Drops the droneci/DRONECI_PASSWORD creds since
artifactapi accepts unauthenticated in-cluster pushes. Also repoints the Dockerfile FROM agent-base base image.
Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
Install basedpyright, python-lsp-server, ty, ruff via uv tool,
gopls via go install, and tea/tflint via dnf. Remove unused
python3/python3-pip packages.