[ci skip] Fix pull-through cache for all registries

Replace deprecated wildcard containerd mirror with per-registry
config_path approach. Add proxy containers for ghcr.io, quay.io,
registry.k8s.io, and reg.kyverno.io on the docker-registry VM.
Set static IP for docker-registry VM to avoid DHCP issues.

modules/create-vm/main.tf

@@ -30,6 +30,10 @@ variable "vlan_tag" {
   type    = string
   default = null
 }
+variable "ipconfig0" {
+  type    = string
+  default = "ip=dhcp,ip6=dhcp"
+}
 
 resource "proxmox_vm_qemu" "cloudinit-vm" {
   vmid             = var.vmid
@@ -48,7 +52,7 @@ resource "proxmox_vm_qemu" "cloudinit-vm" {
   cicustom           = "vendor=local:snippets/${var.cisnippet_name}"
   ciupgrade          = true
   nameserver         = "1.1.1.1 8.8.8.8"
-  ipconfig0          = "ip=dhcp,ip6=dhcp"
+  ipconfig0          = var.ipconfig0
   skip_ipv6          = true
   ciuser             = "root"
   cipassword         = "root"