hub registry: migrate images for pingcap/tidb-tools

[ti-chi-bot]

Replace hub.pingcap.net image pulls/pushes for pingcap/tidb-tools with a cloud-accessible registry.

Acceptance criteria:

• No hub.pingcap.net references in jobs/pipelines for pingcap/tidb-tools
• Image registry endpoints documented and validated