ci: avoid docker hub rate limits

[skl]

Lots of CI workflows are running docker pulls without authentication, meaning that we're more likely to hit rate limits. We already have an authentication token available, just need to use it in more places.

For ory/dockertest, this requires NewAuthConfigurationsFromDockerCfg in order to pass the credentials to the client.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 43.73%. Comparing base (01563a4) to head (d756f7a).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@             Coverage Diff             @@
##             main    #1437       +/-   ##
===========================================
+ Coverage   33.53%   43.73%   +10.19%     
===========================================
  Files         281      312       +31     
  Lines       31325    33911     +2586     
===========================================
+ Hits        10506    14832     +4326     
+ Misses      19959    18123     -1836     
- Partials      860      956       +96     

Flag	Coverage Δ
integration-test	21.75% <ø> (+0.18%)	⬆️
integration-test-arm	0.00% <ø> (ø)
integration-test-vm-x86_64-5.15.152	0.00% <ø> (ø)
integration-test-vm-x86_64-6.10.6	0.00% <ø> (ø)
k8s-integration-test	2.31% <ø> (ø)
oats-test	0.00% <ø> (ø)
unittests	44.63% <ø> (+15.87%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[MrAlias]

Awesome! 🚀