Replace hub.pingcap.net image pulls/pushes for pingcap-qe/tidb-test with a cloud-accessible registry.

Acceptance criteria:

• No hub.pingcap.net references in jobs/pipelines for pingcap-qe/tidb-test
• Image registry endpoints documented and validated