Fix CI runner: seed images to abrban/, kubectl via alpine init, Kaniko Jobs for builds.

Harbor proxy-cache works from core API but containerd can't use it directly,
so all runner images are seeded to abrban/ project.

Co-authored-by: Cursor <cursoragent@cursor.com>

gitops/jobs/seed-ci-images.yaml

@@ -14,7 +14,8 @@ spec:
         - name: registry-pull-secret
       containers:
         - name: skopeo
-          image: registry.abrban.com/proxy-quay/skopeo/stable:latest
+          image: quay.io/skopeo/stable:latest
+          imagePullPolicy: IfNotPresent
           envFrom:
             - secretRef:
                 name: registry-egress-proxy
@@ -24,10 +25,11 @@ spec:
             - |
               set -eux
               DEST="docker://harbor-registry.cloudhost.svc.cluster.local:5000/abrban"
-              skopeo copy --dest-tls-verify=false \
-                docker://docker.gitea.com/gitea/act_runner:0.2.11 \
+              CREDS="harbor_registry_user:harbor_registry_password"
+              skopeo copy --dest-tls-verify=false --dest-creds="${CREDS}" \
+                docker://docker.io/gitea/act_runner:0.2.11 \
                 "${DEST}/act-runner:0.2.11"
-              skopeo copy --dest-tls-verify=false \
+              skopeo copy --dest-tls-verify=false --dest-creds="${CREDS}" \
                 docker://gcr.io/kaniko-project/executor:v1.23.2 \
                 "${DEST}/kaniko-executor:v1.23.2"
               echo SEED_OK