https://github.com/openshift/api/pull/2583 introduces support for configuring TLS curves in the APIServer Config CR.

The image-registry only supports setting TLS minversion and cypersuites (source).

We need a new env var, perhaps "REGISTRY_HTTP_TLS_CURVES", and we also need to change the image-registry server setup to actually use that new option.