ci: move container images to the org registry namespace

Build destination, both builder-image references and the three publish
pins now point at novoyuuparosk-wiki/*. The publish pins name a tag that
does not exist in the new namespace until this run's build job pushes it
and the pin job rewrites them, so publishes are briefly broken mid-run.

.gitea/workflows/build-image.yml

@@ -14,7 +14,7 @@ jobs:
       # Daemonless image builder: kaniko :debug plus the /bin/sleep symlink
       # act needs for job-container PID 1 (see ci/Dockerfile.kaniko-act).
       # No docker socket, no privileges.
-      image: pi5-16.local:3005/mikkeli/kaniko-act:v1.23.2-r2
+      image: pi5-16.local:3005/novoyuuparosk-wiki/kaniko-act:v1.23.2-r2
 
     steps:
       - name: Fetch source, build, push
@@ -30,7 +30,7 @@ jobs:
           set -eu
           HOST="${URL_TO_GITEA#http://}"
           SHORT_SHA=$(echo "${GITHUB_SHA}" | cut -c1-7)
-          IMAGE="${HOST}/mikkeli/novoyuuparosk-wiki-runner"
+          IMAGE="${HOST}/novoyuuparosk-wiki/novoyuuparosk-wiki-runner"
 
           # Source via Gitea archive API (no git/node in this image; repo is
           # private — authenticate with the job's own per-run token)
@@ -64,7 +64,7 @@ jobs:
       # Freshly built runner image: git + GNU sed baked in, and it has no
       # non-shell ENTRYPOINT, so it works as a job container as-is (unlike the
       # kaniko image above). Pulls :latest that the build job just pushed.
-      image: pi5-16.local:3005/mikkeli/novoyuuparosk-wiki-runner:latest
+      image: pi5-16.local:3005/novoyuuparosk-wiki/novoyuuparosk-wiki-runner:latest
     steps:
       - name: Repoint publish workflows at the new image tag
         env:

.gitea/workflows/build-kaniko-act.yml

@@ -19,9 +19,10 @@ jobs:
   build:
     runs-on: ubuntu-latest
     container:
-      # BOOTSTRAP: still the pre-migration image under `mikkeli`, because the
-      # org copy is what this run creates. Flip to the org path once it exists.
-      image: pi5-16.local:3005/mikkeli/kaniko-act:v1.23.2-r2
+      # Self-hosting: the current kaniko-act builds its own successor. The very
+      # first org build ran from `mikkeli/kaniko-act:v1.23.2-r2` instead, since
+      # this path did not exist yet.
+      image: pi5-16.local:3005/novoyuuparosk-wiki/kaniko-act:v1.23.2-r2
 
     steps:
       - name: Fetch source, build, push

.gitea/workflows/publish-ses.yml

@@ -10,7 +10,7 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     container:
-      image: pi5-16.local:3005/mikkeli/novoyuuparosk-wiki-runner:6dc9f68
+      image: pi5-16.local:3005/novoyuuparosk-wiki/novoyuuparosk-wiki-runner:6dc9f68
 
     steps:
       - name: Checkout ses-light-novel

.gitea/workflows/publish-songs.yml

@@ -19,7 +19,7 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     container:
-      image: pi5-16.local:3005/mikkeli/novoyuuparosk-wiki-runner:6dc9f68
+      image: pi5-16.local:3005/novoyuuparosk-wiki/novoyuuparosk-wiki-runner:6dc9f68
 
     steps:
       - name: Checkout ncmr-songs

.gitea/workflows/publish-tech.yml

@@ -10,7 +10,7 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     container:
-      image: pi5-16.local:3005/mikkeli/novoyuuparosk-wiki-runner:6dc9f68
+      image: pi5-16.local:3005/novoyuuparosk-wiki/novoyuuparosk-wiki-runner:6dc9f68
 
     steps:
       - name: Checkout tech-blogs