fix(ci): publish registry blobs in bounded chunks

src/lib/docker-build-contract.test.ts

@@ -62,7 +62,7 @@ it("verifies portability before publishing and uses committed build context", ()
 	expect(publish).toContain("git archive HEAD");
 	expect(
 		publish.indexOf("node scripts/verify-portable-image.mjs"),
-	).toBeLessThan(publish.indexOf("docker push"));
+	).toBeLessThan(publish.indexOf("regctl image import"));
 	expect(publish).toContain("--password-stdin");
 	expect(publish).not.toContain(":latest");
 });