Hello Adam,
Sorry for this inconvenience. The issue is because the mkfastq step uses an internal docker image only open to Broad users, and our team no longer has access to update it. Your bypassing approach is probably the only way if you want to use the mkfastq feature in our workflow.
However, since mkfastq is marked as deprecated in Cell Ranger v9.0, and will be removed later, we also will drop this step from our workflow in next release. For generating fastq from BCL folders, you can either use Broad's BCLConvert workflow, or do it locally.
Sincerely,
Yiming