fix: correct Docker badge and registry claims to point at GHCR

Neither package has ever been pushed to Docker Hub (confirmed via the
Hub API), and CI only logs into and publishes GHCR. The Docker Hub
badge was pointing at a nonexistent repo, and the 'mirrored on Docker
Hub' line overstated what actually happens.