Add private registry auth support

[nathan-joslin]

Currently we can't push to private registries, we need to support this.

[nathan-joslin]

This should be working, so it's a bug. We have an oras credential helper in remote.go.