Sync images to prime registry after release

[brooksn]

KDM syncs images required by rke2 to the prime registry on its own release cadence. It uses skopeo to mirror images, and skip existing images to preserve signatures.

To make images available in the prime registry without waiting for a release of kdm, the rke2 release workflow may sync images immediately after other jobs succeed.