Cut over researchowl deployment to Infisical-managed pull secret

imagePullSecrets: gitea-registry -> gitea-registry-infisical (the
InfisicalStaticSecret-managed dockerconfigjson). Old gitea-registry stays
as rollback net until decommission.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

researchowl/deployment.yaml

@@ -101,7 +101,7 @@ spec:
           persistentVolumeClaim:
             claimName: researchowl-data
       imagePullSecrets:
-        - name: gitea-registry
+        - name: gitea-registry-infisical
 
 # Secret is managed imperatively (not by ArgoCD) to avoid overwriting real values:
 # kubectl create secret generic researchowl-secrets \