aa7599f91d
The default GITHUB_TOKEN provided by Forgejo Actions lacks write:package scope, so docker buildx push failed with 401 reqPackageAccess. Swap in the repo-level REGISTRY_TOKEN secret (a PAT scoped write:package) for docker login; github.actor still supplies the username. Also drops the transient Docker environment diagnostics step — the registry was the issue, the socket/buildx setup is fine.