chore: pin sbom pipeline image, use paasup dockerhub secrets

Switch cve-edge-post.yml to a fixed docker.io/paasup/sbom-pipeline
image and paasup-specific Docker Hub credentials, dropping the nvcr.io
auth entry.

.github/workflows/cve-edge-post.yml

@@ -29,7 +29,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 120
     container:
-      image: ${{ vars.SBOM_PIPELINE_IMAGE }}
+      image: docker.io/paasup/sbom-pipeline
     env:
       OUT_DIR: ${{ github.workspace }}/sbom-out
       TRIVY_CACHE_DIR: ${{ github.workspace }}/sbom-out/cache
@@ -51,8 +51,8 @@ jobs:
       # 사설 레지스트리 인증: 시크릿으로 docker config.json 을 만들어 trivy 가 읽게 한다.
       - name: 레지스트리 인증 구성
         env:
-          DOCKERHUB_USER: ${{ secrets.DOCKERHUB_USER }}
-          DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
+          DOCKERHUB_USER: ${{ secrets.DOCKERHUB_PAASUP_USER }}
+          DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_PAASUP_TOKEN }}
           NGC_API_KEY: ${{ secrets.NGC_API_KEY }}
         run: |
           mkdir -p "$OUT_DIR/.docker"
@@ -62,9 +62,8 @@ jobs:
           def add(reg,user,secret):
               if user and secret:
                   auths[reg]={"auth":base64.b64encode(f"{user}:{secret}".encode()).decode()}
-          add("https://index.docker.io/v1/", os.environ.get("DOCKERHUB_USER"), os.environ.get("DOCKERHUB_TOKEN"))
-          add("docker.getcollate.io", os.environ.get("DOCKERHUB_USER"), os.environ.get("DOCKERHUB_TOKEN"))
-          add("nvcr.io", "$oauthtoken", os.environ.get("NGC_API_KEY"))
+          add("https://index.docker.io/v1/", os.environ.get("DOCKERHUB_PAASUP_USER"), os.environ.get("DOCKERHUB_PAASUP_TOKEN"))
+          add("docker.getcollate.io", os.environ.get("DOCKERHUB_PAASUP_USER"), os.environ.get("DOCKERHUB_PAASUP_TOKEN"))
           out=os.path.join(os.environ["OUT_DIR"],".docker","config.json")
           json.dump({"auths":auths}, open(out,"w"))
           print("configured registries:", list(auths.keys()) or "(none)")