Migrate images from Harbor to a self-hosted registry: a digest-preserving checklist, dual run, and rollback

Moving from Harbor to a self-hosted image registry: copy with skopeo and keep digests, run Harbor and the new registry side by side, cut reads then writes per namespace, with inventory commands, checks, and rollback.