floating-latest-docker-tags-resolve-differently-mid-upgrade

:latest Docker image tags are non-deterministic — they can resolve to different image digests between docker pull invocations during the same upgrade window. The fix is to pin all images to explicit semver tags or digest hashes BEFORE beginning any upgrade sequence. Affected in this session: Traefik, FalkorDB, nginx, Excalidraw SPA, and Excalidraw room containers.