By: Michael Lynch <git@mtlynch.io>
Use Fly registry auth for Dockerless deploys Have the deploy script ask flyctl to mint the short-lived registry credentials that Fly expects, then pass those credentials to Skopeo through a temporary auth file. This keeps the NixCI deploy path Dockerless while avoiding raw token authentication issues against registry.fly.io. Document the deploy flow, including the Nix-built archive, temporary auth setup, registry push, and final image deploy steps.