ci: use Zot API key at registry.oeo.one [CI]

.woodpecker/release-backend.yml

@@ -40,11 +40,10 @@ steps:
   publish-backend:
     image: bash
     environment:
-      ZOT_USERNAME:
-        from_secret: registry_username
-      ZOT_PASSWORD:
-        from_secret: registry_password
-      ZOT_REGISTRY: 192.168.2.162:5000
+      ZOT_USERNAME: justme
+      ZOT_API_KEY:
+        from_secret: registry_api_key
+      ZOT_REGISTRY: registry.oeo.one
     commands:
       - set -euo pipefail
       - release_tag="${CI_COMMIT_TAG:-${RELEASE_TAG:-}}"
@@ -53,12 +52,12 @@ steps:
       - buildah_store="$(dirname "$WOODPECKER_BACKEND_LOCAL_TEMP_DIR")/buildah-cache/webdrop"
       - mkdir -p "$buildah_store/storage" "$buildah_store/run"
       - 'buildah() { command buildah --root "$buildah_store/storage" --runroot "$buildah_store/run" "$@"; }'
-      - printf '%s' "$ZOT_PASSWORD" | buildah login --tls-verify=false "$ZOT_REGISTRY" --username "$ZOT_USERNAME" --password-stdin
+      - printf '%s' "$ZOT_API_KEY" | buildah login "$ZOT_REGISTRY" --username "$ZOT_USERNAME" --password-stdin
       - trap 'buildah logout "$ZOT_REGISTRY" >/dev/null 2>&1 || true' EXIT
       - image="$ZOT_REGISTRY/justme/webdrop-api:$release_tag"
       - latest_image="$ZOT_REGISTRY/justme/webdrop-api:latest"
       - buildah bud --layers --network host --format docker --platform linux/amd64 --tag "$image" --file server/Dockerfile .
       - buildah tag "$image" "$latest_image"
-      - buildah push --tls-verify=false "$image" "docker://$image"
-      - buildah push --tls-verify=false "$latest_image" "docker://$latest_image"
+      - buildah push "$image" "docker://$image"
+      - buildah push "$latest_image" "docker://$latest_image"