fix: use registry.i80.dk (Harbor) instead of ghcr.io

- classify.yml: build/push to registry.i80.dk/gitea/kreuzberg-classify
- classify.nomad: pull from registry.i80.dk with Harbor robot token from Consul KV

classify.nomad

@@ -70,9 +70,13 @@ job "classify" {
       driver = "docker"
 
       config {
-        image   = "ghcr.io/hjess/kreuzberg-classify:latest"
+        image   = "registry.i80.dk/gitea/kreuzberg-classify:latest"
         ports   = ["http"]
         force_pull = true
+        auth {
+          username = "robot$gitserver"
+          password = "${HARBOR_ROBOT_TOKEN}"
+        }
       }
 
       env {
@@ -80,6 +84,14 @@ job "classify" {
         PORT          = "${NOMAD_PORT_http}"
       }
 
+      template {
+        data = <<EOH
+HARBOR_ROBOT_TOKEN="{{ key "harbor/robot/token" }}"
+EOH
+        destination = "secrets/registry.env"
+        env         = true
+      }
+
       restart {
         attempts = 5
         interval = "10m"