fix CI not being allowed to push container image

.forgejo/workflows/container.yml

@@ -3,9 +3,6 @@ name: Build Container
 on:
   push: {}
 
-permissions:
-  packages: write
-
 jobs:
   build-container:
     name: Build Container
@@ -19,7 +16,7 @@ jobs:
         uses: actions/checkout@v6
       - name: Login to container registry (prod only)
         if: ${{ forgejo.ref_name == 'main' }}
-        run: /kaniko/executor login --username="forgejo-actions" --password="${{ forgejo.token }}" git.hamburg.ccc.de
+        run: /kaniko/executor login --username="forgejo-actions" --password="${{ secrets.PACKAGES_TOKEN }}" git.hamburg.ccc.de
       - name: Build Container
         env:
           KANIKO_NO_PUSH: ${{ forgejo.ref_name != 'main' }}
@@ -27,7 +24,6 @@ jobs:
           --dockerfile="${{forgejo.workspace }}/Containerfile"
           --context="dir://${{ forgejo.workspace }}"
           --destination=git.hamburg.ccc.de/ccchh/dooris:latest
-          --credential-helpers=env
           --no-push-cache
           --annotation=org.opencontainers.image.ref.name=dooris
           --annotation=org.opencontainers.image.url=${{ forgejo.server_url }}/${{ forgejo.repository }}