fix(ci): use REGISTRY_TOKEN secret for container registry auth

.gitea/workflows/ci-cd.yml

@@ -136,8 +136,8 @@ jobs:
           echo "Registry: ${REGISTRY_HOST}"
           echo "Actor: ${GITHUB_ACTOR}"
           
-          # Login to Gitea container registry
-          echo "${REGISTRY_PASSWORD}" | ./crane auth login --insecure ${REGISTRY_HOST} -u "${GITHUB_ACTOR}" --password-stdin
+          # Login to Gitea container registry (requires REGISTRY_TOKEN secret with write:package scope)
+          echo "${REGISTRY_PASSWORD}" | ./crane auth login --insecure ${REGISTRY_HOST} -u "${REGISTRY_USER}" --password-stdin
           
           # Build and push web image
           docker build -f ./docker/Dockerfile.web -t mostovik-web:local .
@@ -161,7 +161,8 @@ jobs:
             ./crane push --insecure /tmp/celery.tar ${REGISTRY}/mostovik-celery:latest
           fi
         env:
-          REGISTRY_PASSWORD: ${{ gitea.token }}
+          REGISTRY_USER: ${{ secrets.REGISTRY_USER }}
+          REGISTRY_PASSWORD: ${{ secrets.REGISTRY_TOKEN }}
 
       - name: Image summary
         run: |