Configure DinD sidecar to use Zot as pull-through registry mirror

Route Docker Hub pulls from the forgejo-runner DinD sidecar through
the existing Zot cache at host.minikube.internal:5050, reducing
bandwidth usage and avoiding Docker Hub rate limits during CI builds.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

argocd/manifests/forgejo-runner/configmap.yaml

@@ -22,3 +22,7 @@ data:
       network: "host"
       # Connect to DinD sidecar via TCP (not socket)
       docker_host: tcp://127.0.0.1:2375
+  daemon.json: |
+    {
+      "registry-mirrors": ["http://host.minikube.internal:5050"]
+    }

argocd/manifests/forgejo-runner/deployment.yaml

@@ -77,6 +77,10 @@ spec:
           volumeMounts:
             - name: dind-storage
               mountPath: /var/lib/docker
+            - name: config
+              mountPath: /etc/docker/daemon.json
+              subPath: daemon.json
+              readOnly: true
 
       volumes:
         - name: data

docs/changelog.d/feature-dind-zot-registry-mirror.infra.md

@@ -0,0 +1 @@
+Configure DinD sidecar to use Zot as a pull-through registry mirror for Docker Hub images, reducing bandwidth and avoiding rate limits during Dagger CI builds.