Allow logging-stack images through the dockerhub remote

The centralized logging stack (argocd-apps ClickHouse + Vector + NATS
JetStream) pulls all container images through artifactapi instead of directly
from upstream. Add the Docker Hub repositories it needs to the dockerhub remote
allowlist.

- add ^altinity/ (clickhouse-operator + metrics-exporter)
- add ^clickhouse/ (clickhouse-server)
- add ^library/nats (NATS server)
- add ^natsio/ (nats-box, nats-server-config-reloader)
- add ^timberio/vector (vector agent/aggregator/archiver/vm-ingest + CI)

Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv

config/remote_docker/dockerhub.yaml

@@ -4,16 +4,19 @@ immutable_ttl: 0
 mutable_ttl: 300
 patterns:
   - "^alpine/"
+  - "^altinity/"
   - "^library/almalinux"
   - "^library/alpine"
   - "^library/busybox"
   - "^library/debian"
   - "^library/fedora"
+  - "^library/nats"
   - "^library/nginx"
   - "^library/postgres"
   - "^library/redis"
   - "^beats/filebeat"
   - "^bitnami/"
+  - "^clickhouse/"
   - "^curlimages/curl"
   - "^emberstack/kubernetes-reflector"
   - "^grafana/"
@@ -24,10 +27,12 @@ patterns:
   - "^jfrog/"
   - "^jpgouin/"
   - "^kanidm/"
+  - "^natsio/"
   - "^osixia/"
   - "^rancher/"
   - "^rspamd/rspamd"
   - "^tiredofit/"
+  - "^timberio/vector"
   - "^tozd/postfix"
   - "^traefik/"
   - "^valkey/valkey"