The registry PAT secret had to be named REGISTRY_PAT (Gitea forbids the GITEA_ prefix for secret names). Point the publish docker-login at secrets.REGISTRY_PAT.
The registry PAT secret had to be named REGISTRY_PAT (Gitea forbids the GITEA_ prefix for secret names). Point the publish docker-login at secrets.REGISTRY_PAT.