docker-registry: add role