CronJobs were using bare image name 'myorg-assistant:latest' with
imagePullPolicy: IfNotPresent and no imagePullSecrets. K8s tried to
pull from Docker Hub → ImagePullBackOff on all 4 running CronJob pods.
Changed to git.rogi.casa/roger/myorg-assistant/myorg-assistant:fcf79bf
(matching the Deployment), imagePullPolicy: Always, and added
imagePullSecrets: gitea-registry to all 5 CronJob manifests.