ci(deploy): pull infra images (postgres/minio/caddy) via Nexus mirror

Docker Hub blocks Iran IPs (403), so 'docker compose up' couldn't pull the base
infra images on the server even though all service images built fine through the
mirror. Prefix them with ${INFRA_REGISTRY:-mirror.soroushasadi.com/} so they pull
through Nexus by default; set INFRA_REGISTRY= to use plain Docker Hub names.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

docker-compose.v2.yml

@@ -14,7 +14,9 @@ services:
   # ── Shared infrastructure ───────────────────────────────────────────────────
 
   postgres:
-    image: postgres:16-alpine
+    # Pull infra images through the Nexus mirror (Docker Hub blocks Iran IPs).
+    # Override INFRA_REGISTRY= (empty) to use plain Docker Hub names elsewhere.
+    image: ${INFRA_REGISTRY:-mirror.soroushasadi.com/}postgres:16-alpine
     container_name: fr2-postgres
     restart: unless-stopped
     environment:
@@ -38,7 +40,7 @@ services:
       start_period: 10s
 
   minio:
-    image: minio/minio:latest
+    image: ${INFRA_REGISTRY:-mirror.soroushasadi.com/}minio/minio:latest
     container_name: fr2-minio
     restart: unless-stopped
     command: server /data --console-address ":9001"
@@ -328,7 +330,7 @@ services:
   # For local dev (no real domain), comment out this block and access
   # services directly on their host ports (:3000, :8088, :9000).
   caddy:
-    image: caddy:2-alpine
+    image: ${INFRA_REGISTRY:-mirror.soroushasadi.com/}caddy:2-alpine
     container_name: fr2-caddy
     restart: unless-stopped
     # Opt-in only: `docker compose --profile edge up`. NOT started by default —