fix: bypass docker login, write auth config directly

Docker credential helper on the runner may interfere with login.
Write base64 credentials to ~/.docker/config.json directly.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.gitea/workflows/ci.yaml

@@ -23,7 +23,7 @@ jobs:
         with:
           fetch-depth: 0
       - run: |
-          podman run --rm \
+          docker run --rm \
             -v "$PWD:/scan:ro" \
             ghcr.io/gitleaks/gitleaks:latest \
             detect --source /scan -v
@@ -33,9 +33,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - run: echo "$HARBOR_PASS" | podman login harbor.mymx.me -u "$HARBOR_USER" --password-stdin
+      - run: |
+          mkdir -p ~/.docker
+          AUTH=$(printf '%s:%s' "$HARBOR_USER" "$HARBOR_PASS" | base64 -w0)
+          printf '{"auths":{"harbor.mymx.me":{"auth":"%s"}}}\n' "$AUTH" > ~/.docker/config.json
         env:
           HARBOR_USER: ${{ secrets.HARBOR_USER }}
           HARBOR_PASS: ${{ secrets.HARBOR_PASS }}
-      - run: podman build -t harbor.mymx.me/s5p/s5p:latest -f Containerfile .
-      - run: podman push harbor.mymx.me/s5p/s5p:latest
+      - run: docker build -t harbor.mymx.me/s5p/s5p:latest -f Containerfile .
+      - run: docker push harbor.mymx.me/s5p/s5p:latest