How to self-host a Docker container registry behind NGINX with htpasswd authentication and mutual TLS client certificates, locking access down to specific machines you control.