CI: retry docker builds on transient registry/network failures.

Co-authored-by: Cursor <cursoragent@cursor.com>

scripts/publish-ift-aux-images.sh

@@ -20,11 +20,12 @@ publish_image() {
 
   if echo "${FILES}" | grep -qE "${path_pattern}"; then
     echo "== ${name}: rebuild (matched: ${path_pattern})"
-    docker buildx build -f "${dockerfile}" --push \
-      -t "${REGISTRY}/${name}:${TAG}" \
-      -t "${REGISTRY}/${name}:ift" \
-      --provenance=false --sbom=false \
-      "${context}"
+    bash scripts/retry-docker-build.sh 3 30 -- \
+      docker buildx build -f "${dockerfile}" --push \
+        -t "${REGISTRY}/${name}:${TAG}" \
+        -t "${REGISTRY}/${name}:ift" \
+        --provenance=false --sbom=false \
+        "${context}"
     return
   fi