FEAT(zot): enable anonymous read access for UI

- Add accessControl with anonymousPolicy for read operations
- Keep authentication required for push (create/update/delete)
- Fixes UI login redirect loop issue

zot/helm-values.yaml

@@ -117,6 +117,15 @@ configMaps:
               "htpasswd": {
                 "path": "/etc/zot/htpasswd"
               }
+            },
+            "accessControl": {
+              "**": {
+                "anonymousPolicy": ["read"],
+                "policies": [{
+                  "users": ["admin"],
+                  "actions": ["read", "create", "update", "delete"]
+                }]
+              }
             }
           },
           "log": {