Gitea Private Images Were Not Private

Gitea CVE-2026-27771 let unauthenticated outsiders pull private container images from affected self-hosted registries. Upgrade to Gitea 1.26.2 and restrict registry access until patched.