fix: update image to Gitea cluster service registry

containerd configured on all nodes with insecure registry for
gitea-http.gitea.svc:3000.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

environments/health-app/base/deployment.yaml

@@ -31,7 +31,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: health-app
-          image: ghcr.io/infinicaretech/health-app:latest
+          image: gitea-http.gitea.svc:3000/gitea_admin/health-app:latest
           ports:
             - name: http
               containerPort: 3000
@@ -70,5 +70,3 @@ spec:
             capabilities:
               drop:
                 - ALL
-      imagePullSecrets:
-        - name: ghcr-cred

environments/health-app/overlays/production/kustomization.yaml

@@ -5,7 +5,7 @@ resources:
   - ../../base
 
 images:
-  - name: ghcr.io/infinicaretech/health-app
+  - name: gitea-http.gitea.svc:3000/gitea_admin/health-app
     newTag: latest
 
 patches: