ci(release): switch registry login to REGISTRY_TOKEN (#3)

Uses the repo-scoped REGISTRY_TOKEN PAT (write:package) for docker
login instead of the default GITHUB_TOKEN, which Forgejo does not
issue with container-registry write scope.

.forgejo/workflows/release.yml

@@ -34,21 +34,6 @@ jobs:
             echo "::notice::No Dockerfile + go.mod yet — release build skipped"
           fi
 
-      - name: Docker environment diagnostics
-        if: steps.guard.outputs.ready == 'true'
-        shell: bash
-        run: |
-          echo "--- whoami + env ---"
-          id
-          echo "DOCKER_HOST=${DOCKER_HOST:-<unset>}"
-          ls -la /var/run/docker.sock || echo "NO socket at /var/run/docker.sock"
-          echo "--- docker info ---"
-          docker version || true
-          docker info || true
-          echo "--- buildx ---"
-          docker buildx version || true
-          docker buildx ls || true
-
       - name: Compute image tags
         id: tags
         if: steps.guard.outputs.ready == 'true'
@@ -67,7 +52,7 @@ jobs:
         if: steps.guard.outputs.ready == 'true'
         shell: bash
         run: |
-          echo "${{ secrets.GITHUB_TOKEN }}" \
+          echo "${{ secrets.REGISTRY_TOKEN }}" \
             | docker login git.fabledsword.com -u "${{ github.actor }}" --password-stdin
 
       - name: Build and push