Cut over polymarket-bot deployments to Infisical-managed pull secret

api/bot: imagePullSecrets gitea-registry -> gitea-registry-infisical.
dashboard: add gitea-registry-infisical (previously had NO pull secret
despite pulling a private image — fixes latent ErrImagePull-on-reschedule
bug). Old gitea-registry stays as rollback net until decommission.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

polymarket-bot/deployment-api.yaml

@@ -21,7 +21,7 @@ spec:
         app: api
     spec:
       imagePullSecrets:
-      - name: gitea-registry
+      - name: gitea-registry-infisical
       containers:
       - command:
         - uvicorn

polymarket-bot/deployment-bot.yaml

@@ -21,7 +21,7 @@ spec:
         app: bot
     spec:
       imagePullSecrets:
-      - name: gitea-registry
+      - name: gitea-registry-infisical
       containers:
       - command:
         - python3

polymarket-bot/deployment-dashboard.yaml

@@ -20,6 +20,8 @@ spec:
       labels:
         app: dashboard
     spec:
+      imagePullSecrets:
+      - name: gitea-registry-infisical
       containers:
       - image: git.chemavx.xyz/chemavx/polymarket-bot-dashboard:4928a3c1
         imagePullPolicy: Always