Stabilize CI Kaniko tag and keep Harbor free of egress proxy.

Use the seeded kaniko v1.27.6-debug image, retry npm ci, and push via harbor-core without HTTP_PROXY so Harbor UI metadata and blob uploads keep working.

Co-authored-by: Cursor <cursoragent@cursor.com>

gitops/jobs/build-platform-kaniko.yaml

@@ -31,7 +31,7 @@ spec:
               mountPath: /workspace
       containers:
         - name: kaniko
-          image: registry.abrban.com/abrban/kaniko-executor:v1.23.2
+          image: registry.abrban.com/abrban/kaniko-executor:v1.27.6-debug
           env:
             - name: IMAGE_TAG
               value: bootstrap
@@ -40,7 +40,10 @@ spec:
             - -ec
             - |
               set -eux
-              REG="harbor-registry.cloudhost.svc.cluster.local:5000/abrban"
+              REG="harbor-core.cloudhost.svc.cluster.local/abrban"
+              unset HTTP_PROXY HTTPS_PROXY http_proxy https_proxy || true
+              export NO_PROXY="harbor-core.cloudhost.svc.cluster.local,harbor-registry.cloudhost.svc.cluster.local,registry.abrban.com,10.43.0.0/16,.svc,.cluster.local"
+              export no_proxy="$NO_PROXY"
               /kaniko/executor \
                 --dockerfile=/workspace/backend/Dockerfile \
                 --context=dir:///workspace/backend \
@@ -55,6 +58,14 @@ spec:
           volumeMounts:
             - name: workspace
               mountPath: /workspace
+            - name: docker-config
+              mountPath: /kaniko/.docker
       volumes:
         - name: workspace
           emptyDir: {}
+        - name: docker-config
+          secret:
+            secretName: kaniko-harbor-auth
+            items:
+              - key: .dockerconfigjson
+                path: config.json