ServiceAccount is a great way to support image pull secrets. It follows standard k8s conventions and would be a good addition to the ImageRepository API.
This will also be consistent with the proposed OCIRepository API (RFC #2601).
Here is a link to the discussion regarding this enhancement.
cc: @stefanprodan @squaremo