scope docker credentials

.gitea/workflows/build.yaml

@@ -31,6 +31,8 @@ jobs:
           registry: ${{ secrets.DOCKER_REGISTRY }}
           username: ${{ secrets.DOCKER_REGISTRY_USER }}
           password: ${{ secrets.DOCKER_REGISTRY_PASSWORD }}
+          scope: ${{secrets.DOCKER_REGISTRY}}/${{env.IMAGE}}@push
+          logout: true
       - name: Build and push Docker image
         uses: docker/build-push-action@v6
         with: