Private Registry

Self-host a private Docker registry with Harbor or distribution/registry. Covers TLS setup, authentication, image signing with Cosign, and garbage collection.