fix(promoter): correct Forgejo registry service hostname

forgejo-gitea-http.cicd.svc.cluster.local (headless svc, port 3000)
not forgejo-gitea (doesn't exist). Also wire REGISTRY_BASE env var
in deployment.yaml so it can be overridden without code change.

internal/webhook/promoter.go

@@ -31,7 +31,7 @@ const (
 	argoNamespace   = "argocd"
 	saTokenPath     = "/var/run/secrets/kubernetes.io/serviceaccount/token"
 	saCACertPath    = "/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"
-	defaultRegBase  = "http://forgejo-gitea.cicd.svc.cluster.local:3000"
+	defaultRegBase  = "http://forgejo-gitea-http.cicd.svc.cluster.local:3000"
 	defaultRegUser  = "rock"
 	promoterTimeout = 20 * time.Second
 )

k8s/deployment.yaml

@@ -101,6 +101,8 @@ spec:
               name: forgejo-registry-pat
               key: pat
               optional: true
+        - name: REGISTRY_BASE
+          value: "http://forgejo-gitea-http.cicd.svc.cluster.local:3000"
         volumeMounts:
         - name: config
           mountPath: /etc/gateway