A Docker build pushes successfully but later pulls fail

A registry migration leaves CI green while production deploys fail or pull an unexpected image because the runtime host is still logged into the former registry.