Containerd

This draft is based on a real cluster note where I validated private image pulls in Kubernetes by creating a Docker registry secret, attaching it to a deployment, and testing the workload in a dedicated namespace.