feat(registry): 写入改走鉴权网关，构建先扫描再推送

internal/build/k8sjobs.go

@@ -61,8 +61,8 @@ func (k *K8sJobs) JobPhase(ctx context.Context, jobName string) (JobPhase, error
 		case batchv1.JobComplete:
 			return JobSucceeded, nil
 		case batchv1.JobFailed:
-			// Covers a CRITICAL CVE (trivy --exit-code 1), a kaniko failure, and
-			// DeadlineExceeded — all are a rejected build.
+			// Covers a CRITICAL CVE (trivy --exit-code 1), a kaniko or push
+			// failure, and DeadlineExceeded — all are a rejected build.
 			return JobFailed, nil
 		}
 	}