Proxy cache project transitions from global pull-through to project-scoped upstream auth in Harbor
Goal is to understand cache freshness and credential isolation when using the project-scoped proxy cache instead of the legacy per-registry pull-through cache. The feature binds upstream registry credentials to a dedicated proxy-cache project rather than using global configuration, which changes multi-tenant isolation. Cached manifests and blobs are served f