fix: match dockerhub env var names in registry auth script

Python was still reading DOCKERHUB_PAASUP_USER/TOKEN while the env:
block sets DOCKERHUB_USER/TOKEN, silently disabling private registry
auth. Also restore the nvcr.io (NGC) auth entry that was dropped.

.github/workflows/cve-edge-post.yml

@@ -63,8 +63,11 @@ jobs:
           def add(reg,user,secret):
               if user and secret:
                   auths[reg]={"auth":base64.b64encode(f"{user}:{secret}".encode()).decode()}
-          add("https://index.docker.io/v1/", os.environ.get("DOCKERHUB_PAASUP_USER"), os.environ.get("DOCKERHUB_PAASUP_TOKEN"))
-          add("docker.getcollate.io", os.environ.get("DOCKERHUB_PAASUP_USER"), os.environ.get("DOCKERHUB_PAASUP_TOKEN"))
+          add("https://index.docker.io/v1/", os.environ.get("DOCKERHUB_USER"), os.environ.get("DOCKERHUB_TOKEN"))
+          # docker.getcollate.io(openmetadata)는 Docker Hub 프록시 → 익명 pull 시 Docker Hub rate
+          # limit(TOOMANYREQUESTS)에 걸린다. Docker Hub 자격증명으로 인증해 해소.
+          add("docker.getcollate.io", os.environ.get("DOCKERHUB_USER"), os.environ.get("DOCKERHUB_TOKEN"))
+          add("nvcr.io", "$oauthtoken", os.environ.get("NGC_API_KEY"))
           out=os.path.join(os.environ["OUT_DIR"],".docker","config.json")
           json.dump({"auths":auths}, open(out,"w"))
           print("configured registries:", list(auths.keys()) or "(none)")