I've discovered that [1] says that we can ONLY release CRW 1.2 (based on RHEL8 images) on the NEW registry.redhat.io, NOT the unauth'd registry.access.redhat.com.

[1] https://docs.engineering.redhat.com/pages/viewpage.action?spaceKey=RCM&title=Terms+Based+Registry+Shipment+Policy

So everywhere that we mention a CRW 1.2 container, it needs to be on the new registry, eg., registry.redhat.io/codeready-workspaces/server-rhel8:1.2 instead of registry.access.redhat.com/codeready-workspaces/server:1.1

This means we'll have to respin the operator (it hardcodes its dep images) and probably the server too (hardcoded stacks/samples).