A rootless Podman login succeeds and image pulls fail

Authentication works, yet short-name resolution leads pulls toward a legacy alias path that the rootless trust store does not trust.