feat: python3.11 base runtime image + DockerHub registry support

- runtimes/python3.11/: Dockerfile + server.py (HTTP wrapper на :8080)
- builder.go: RegistrySecret field, volume mount docker-creds для kaniko, убран --skip-tls-verify
- config.go: добавлен RegistrySecret (env REGISTRY_SECRET, default sless-registry-auth)
- main.go: передаём RegistrySecret в builder.Config
- hack/create-registry-secret.sh: создаёт k8s Secret из DockerHub токена

Образ наружу: naeel/sless-runtime-python3.11:latest (DockerHub)
K8s secret: sless-registry-auth в namespace sless

main.go

@@ -118,13 +118,14 @@ func main() {
 
 	// Builder использует k8s client из manager'а
 	bldr := builder.New(mgr.GetClient(), builder.Config{
-		BuilderImage: cfg.BuilderImage,
-		RegistryHost: cfg.RegistryHost,
-		S3Endpoint:   cfg.S3Endpoint,
-		S3AccessKey:  cfg.S3AccessKey,
-		S3SecretKey:  cfg.S3SecretKey,
-		S3Bucket:     cfg.S3Bucket,
-		Namespace:    "sless",
+		BuilderImage:   cfg.BuilderImage,
+		RegistryHost:   cfg.RegistryHost,
+		RegistrySecret: cfg.RegistrySecret,
+		S3Endpoint:     cfg.S3Endpoint,
+		S3AccessKey:    cfg.S3AccessKey,
+		S3SecretKey:    cfg.S3SecretKey,
+		S3Bucket:       cfg.S3Bucket,
+		Namespace:      "sless",
 	})
 
 	if err = (&controllers.FunctionReconciler{