Registry reachability and compatibility

In v0.12.2 registry handling should be more robust: reachability checks should use standard ports to avoid false negatives, deployments should optionally support insecure (non-TLS) registries when explicitly configured, and compatibility with third-party registries should be improve to reduce connection and credential failures.