hub registry: migrate images for pingcap/tiflash

[ti-chi-bot]

Replace hub.pingcap.net image pulls/pushes for pingcap/tiflash with a cloud-accessible registry.

Acceptance criteria:

• No hub.pingcap.net references in jobs/pipelines for pingcap/tiflash
• Image registry endpoints documented and validated