fix: pass PAT secrets (REGISTRY_USER/REGISTRY_TOKEN) to template

gitea.token cannot push packages; use a PAT with package scope.

Co-Authored-By: Claude Opus 4.8 <[email protected]>

.gitea/workflows/build.yml

@@ -12,10 +12,11 @@ permissions:
 
 jobs:
   trigger-internal-build:
-    uses: infras/workflow-templates/.gitea/workflows/docker-template.yml@1745732456bdd9bd41bbec4bb4cf9cff08f650fe
+    uses: infras/workflow-templates/.gitea/workflows/docker-template.yml@47684a2ffa498f4101557efc3acf1ae8a354178f
     with:
       image_name: 'simple-http-server'
       image_owner: thistine
       image_tag: ${{ gitea.ref_name }}
     secrets:
-      REGISTRY_TOKEN: ${{ gitea.token }} 
+      REGISTRY_USER: ${{ secrets.REGISTRY_USER }}
+      REGISTRY_TOKEN: ${{ secrets.REGISTRY_TOKEN }}