Strange. We are doing exactly the same and have no issues with the ContainerApp seeing the CR and being able to pull the image. We don't have it configured to use a different provider either.
What Azure method are you authenticating with? AAD user or Service principal?