Ditch GHCR: A Production-Grade Self-Hosted Docker Registry on a Single DigitalOcean Droplet

A full, copy-paste walkthrough for replacing a paid/limited container registry with your own private one, backed by object storage, fronted by Nginx Proxy Manager, and wired into a GitHub Actions build-scan-deploy pipeline.