feat: point SQS charts to public GHCR image

Forgejo registry unreachable from worker nodes (network isolation +
host-to-ClusterIP routing gaps). Both management-service and queue-operator
now ship from the same public GHCR image, with queue-operator selected via
command override.

k8s/sqs/charts/queue-crd/templates/operator-deployment.yaml

@@ -18,6 +18,7 @@ spec:
         - name: queue-operator
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
           imagePullPolicy: {{ .Values.image.pullPolicy }}
+          command: ["/queue-operator"]
           env:
             - name: KMSVC_KAFKA_BROKERS
               value: {{ .Values.kafkaBrokers | quote }}