C1(valkey-mirror): swap paperless and immich to local valkey

Switches paperless redis sidecar and immich-valkey to the locally-built
registry.ops.eblu.me/blumeops/valkey image. Sidecars are stateless
(paperless: no PV, immich: emptyDir cache) so this is a clean tag swap.

Drops the DR-2026-04 TODO in paperless about multi-arch redis — resolved
by this mirror.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

argocd/manifests/immich/kustomization.yaml

@@ -19,4 +19,5 @@ images:
   - name: ghcr.io/immich-app/immich-machine-learning
     newTag: v2.6.3
   - name: docker.io/valkey/valkey
-    newTag: "8.1-alpine"
+    newName: registry.ops.eblu.me/blumeops/valkey
+    newTag: v8.1.6-r0-946fa75

argocd/manifests/paperless/kustomization.yaml

@@ -14,9 +14,6 @@ resources:
 images:
   - name: registry.ops.eblu.me/blumeops/paperless
     newTag: v2.20.13-07f52e9
-  # TODO(DR-2026-04): authentik-redis is amd64-only (nix-built on ringtail).
-  # Was running under QEMU emulation before. Switched to upstream valkey
-  # during DR recovery. Build a multi-arch blumeops/redis or keep upstream.
   - name: docker.io/library/redis
-    newName: docker.io/valkey/valkey
-    newTag: "8.1-alpine"
+    newName: registry.ops.eblu.me/blumeops/valkey
+    newTag: v8.1.6-r0-946fa75