Cut over polymarket-bot deployments to Infisical-managed pull secret

api/bot: imagePullSecrets gitea-registry -> gitea-registry-infisical.
dashboard: add gitea-registry-infisical (previously had NO pull secret
despite pulling a private image — fixes latent ErrImagePull-on-reschedule
bug). Old gitea-registry stays as rollback net until decommission.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

polymarket-bot/deployment-api.yaml

@@ -21,7 +21,7 @@ spec:
         app: api
     spec:
       imagePullSecrets:
-      - name: gitea-registry
+      - name: gitea-registry-infisical
       containers:
       - command:
         - uvicorn