Pull musl-build-env Docker image from Datadog public container registry

[xlamorlette-datadog]

Description

This pulls the musl-build-env toolchain Docker image from the Datadog public container registry (registry.datadoghq.com), for every non-GitLab build.

Motivation

Since #442, we often hit AWS ECR rate limit when pulling the musl-build-env Docker image in the GitHub 'System Tests / build (push)' job (example):

Unable to find image 'public.ecr.aws/datadog/musl-build-env@sha256:fd1ab35b2a51538623740c499606a0f6240947b509b39bd1c754d7a5ee4b8c6b' locally
docker: Error response from daemon: toomanyrequests: Data limit exceeded

Validation

See the run in this PR.

Jira ticket: IDMPL-1034 [Nginx] [CI] System tests broken by AWS ECR rate limit

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-30T16:08:48.675846Z	513d452	Draft marked ready
🔒 Security Review	✅ Completed 2026-09-30T16:12:11.248315Z	513d452	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[datadog-datadog-prod-us1-2]

✅ All CI checks and tests passed.

🎉 All green!

🧪 All tests passed
❄️ No new flaky tests detected

🎯 Code Coverage (details)
• Patch Coverage: 100.00%
• Overall Coverage: 69.29% (+0.08%)

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 513d452 | Docs | View more details | Give us feedback!}