feat: point SQS charts to public GHCR image

Forgejo registry unreachable from worker nodes (network isolation +
host-to-ClusterIP routing gaps). Both management-service and queue-operator
now ship from the same public GHCR image, with queue-operator selected via
command override.

k8s/sqs/charts/management-service/values.yaml

@@ -2,7 +2,7 @@ namespace: sqs
 replicaCount: 3
 
 image:
-  repository: forgejo.riotpiao.homelab.com/rock/kafka-management-service
+  repository: ghcr.io/riotpiaole/kmsvc-management-service
   tag: latest
   pullPolicy: Always
 

k8s/sqs/charts/queue-crd/templates/operator-deployment.yaml

@@ -18,6 +18,7 @@ spec:
         - name: queue-operator
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
           imagePullPolicy: {{ .Values.image.pullPolicy }}
+          command: ["/queue-operator"]
           env:
             - name: KMSVC_KAFKA_BROKERS
               value: {{ .Values.kafkaBrokers | quote }}

k8s/sqs/charts/queue-crd/values.yaml

@@ -1,7 +1,7 @@
 namespace: sqs
 
 image:
-  repository: forgejo.riotpiao.homelab.com/rock/kafka-management-service-queue-operator
+  repository: ghcr.io/riotpiaole/kmsvc-management-service
   tag: latest
   pullPolicy: Always