ci: fix woodpecker registry secrets and base images

.woodpecker.yml

@@ -13,6 +13,9 @@ steps:
       REGISTRY_PASSWORD:
         from_secret: REGISTRY_PASSWORD
     commands:
+      - test -n "${REGISTRY_HOSTPORT}"
+      - test -n "${REGISTRY_USERNAME}"
+      - test -n "${REGISTRY_PASSWORD}"
       - echo "${REGISTRY_PASSWORD}" | docker login "${REGISTRY_HOSTPORT}" -u "${REGISTRY_USERNAME}" --password-stdin
       - docker build -t "${REGISTRY_HOSTPORT}/nxtgauge-ai-assistant" -f Dockerfile .
       - docker push "${REGISTRY_HOSTPORT}/nxtgauge-ai-assistant"

Dockerfile

@@ -1,4 +1,4 @@
-FROM registry.nxtgauge.com/rust:1.87-alpine AS builder
+FROM registry.nxtgauge.com/rust:alpine AS builder
 RUN apk add --no-cache musl-dev pkgconfig openssl-dev
 WORKDIR /app
 COPY Cargo.toml Cargo.lock* ./

README.md

@@ -58,3 +58,10 @@ cargo run
 
 - Service starts even if Ollama model is unavailable; provider returns graceful fallback responses.
 - STT (`faster-whisper`) is intentionally deferred to phase 2.
+
+## CI (Woodpecker)
+
+Required secrets:
+- `REGISTRY_HOSTPORT`
+- `REGISTRY_USERNAME`
+- `REGISTRY_PASSWORD`