fix: use NodePort address for container image registry

Node kubelets use host DNS, not cluster DNS. Image address must
be reachable from host network: 10.0.0.3:31427.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

environments/health-app/overlays/production/kustomization.yaml

@@ -5,7 +5,7 @@ resources:
   - ../../base
 
 images:
-  - name: gitea-http.gitea.svc:3000/gitea_admin/health-app
+  - name: 10.0.0.3:31427/gitea_admin/health-app
     newTag: latest
 
 patches: