- Replace type=gha cache (broken on Gitea: unparseable runtime token)
with type=registry cache using image-manifest/oci-mediatypes options
that the Gitea registry accepts.
- Push with a Gitea PAT (REGISTRY_TOKEN) since the auto job token
cannot publish OCI images to the package repo.
- Add registry login to the CI docker smoke-test job.