fix(ci): Use mirror.gcr.io to avoid Docker Hub rate limits

.woodpecker.yml

@@ -3,7 +3,7 @@ steps:
   # PR VALIDATION: Parallel type checks (PRs only)
   # ===========================================
   typecheck-backend:
-    image: node:20
+    image: mirror.gcr.io/library/node:22
     commands:
       - cd backend
       - npm ci --prefer-offline
@@ -13,7 +13,7 @@ steps:
       event: pull_request
 
   typecheck-cannaiq:
-    image: node:20
+    image: mirror.gcr.io/library/node:22
     commands:
       - cd cannaiq
       - npm ci --prefer-offline
@@ -23,7 +23,7 @@ steps:
       event: pull_request
 
   typecheck-findadispo:
-    image: node:20
+    image: mirror.gcr.io/library/node:22
     commands:
       - cd findadispo/frontend
       - npm ci --prefer-offline
@@ -33,7 +33,7 @@ steps:
       event: pull_request
 
   typecheck-findagram:
-    image: node:20
+    image: mirror.gcr.io/library/node:22
     commands:
       - cd findagram/frontend
       - npm ci --prefer-offline
@@ -46,7 +46,7 @@ steps:
   # AUTO-MERGE: Merge PR after all checks pass
   # ===========================================
   auto-merge:
-    image: alpine:latest
+    image: mirror.gcr.io/library/alpine:latest
     environment:
       GITEA_TOKEN:
         from_secret: gitea_token
@@ -156,7 +156,7 @@ steps:
   # STAGE 3: Deploy and Run Migrations
   # ===========================================
   deploy:
-    image: bitnami/kubectl:latest
+    image: mirror.gcr.io/bitnami/kubectl:latest
     environment:
       KUBECONFIG_CONTENT:
         from_secret: kubeconfig_data