registry: default --insecure-registry to localhost and 127.0.0.1

Note sure it's the best way to do this, since list vars have no default.

Fixes #8889 8887

Also added some test for `registry.IsSecure`