create_registry_secret() was hardcoded to use the "default" namespace,
but pods are deployed to the spec's configured namespace. The secret
must be in the same namespace as the pods for imagePullSecrets to work.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>