ci: move container images to the org registry namespace

Build destination, both builder-image references and the three publish
pins now point at novoyuuparosk-wiki/*. The publish pins name a tag that
does not exist in the new namespace until this run's build job pushes it
and the pin job rewrites them, so publishes are briefly broken mid-run.

.gitea/workflows/build-image.yml

@@ -14,7 +14,7 @@ jobs:
       # Daemonless image builder: kaniko :debug plus the /bin/sleep symlink
       # act needs for job-container PID 1 (see ci/Dockerfile.kaniko-act).
       # No docker socket, no privileges.
-      image: pi5-16.local:3005/mikkeli/kaniko-act:v1.23.2-r2
+      image: pi5-16.local:3005/novoyuuparosk-wiki/kaniko-act:v1.23.2-r2
 
     steps:
       - name: Fetch source, build, push
@@ -30,7 +30,7 @@ jobs:
           set -eu
           HOST="${URL_TO_GITEA#http://}"
           SHORT_SHA=$(echo "${GITHUB_SHA}" | cut -c1-7)
-          IMAGE="${HOST}/mikkeli/novoyuuparosk-wiki-runner"
+          IMAGE="${HOST}/novoyuuparosk-wiki/novoyuuparosk-wiki-runner"
 
           # Source via Gitea archive API (no git/node in this image; repo is
           # private — authenticate with the job's own per-run token)
@@ -64,7 +64,7 @@ jobs:
       # Freshly built runner image: git + GNU sed baked in, and it has no
       # non-shell ENTRYPOINT, so it works as a job container as-is (unlike the
       # kaniko image above). Pulls :latest that the build job just pushed.
-      image: pi5-16.local:3005/mikkeli/novoyuuparosk-wiki-runner:latest
+      image: pi5-16.local:3005/novoyuuparosk-wiki/novoyuuparosk-wiki-runner:latest
     steps:
       - name: Repoint publish workflows at the new image tag
         env: