Recommended way to update registry credentials?

[dwightgunning]

What's the recommended way to update registry credentials in a running K3D cluster? Hopefully there's a way to script it so it's easily repeatable.

For context, I'm configuring a private GitHub Container Registry and using a GitHub PAT which I want to rotate periodically. My k3d-config.yaml has the following registries section:

registries:
  config: |
    mirrors:
      ghcr.io:
    configs:
      ghcr.io:
        auth:
          username: ${GITHUB_USERNAME}
          password: ${GITHUB_TOKEN}

[NeverBehave]

Related: #1377