opengist: 1.13 -> 1.15 (proven on the bench AND on 9202, with its test record)

1.15 (v1.15.2 today; its digest is in the entry) moved every page under /-/
(/login now 404, /-/login serves) and marks its session cookie Secure —
the account read back through its own page, a never-created user 404.
Memory: app 77.8 % of 128M, cgroup peak 100 % (file cache), 0 kills.
Box (9202): done, read back, R-626 clean. R-654 for the /login bookmark.
09 decision 21.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

templates/opengist/.felhom.yml

@@ -10,7 +10,7 @@ subdomain: "gist"
 slug: "opengist"
 # catalog_since: the date THIS repo last changed this app's pinned images. Any commit that
 # changes an image: line must set this to the same day (see CLAUDE.md).
-catalog_since: "2026-07-18"
+catalog_since: "2026-09-23"
 
 # --- Resource hints (displayed on deploy screen) ---
 resources:
@@ -89,3 +89,9 @@ i18n:
       - env_var: SUBDOMAIN
         label: 'Subdomain'
         description: 'The subdomain this app answers on'
+
+# update_ladder — the test record: one tested step per line, oldest first (JSON flow mappings,
+# `09-update-architecture.md` §6.4 part 4). WRITTEN BY scripts/upgrade-test.py, never by hand;
+# gated by scripts/check-test-record.py. An image: move without a proven entry here is refused.
+update_ladder:
+  - {"from": {"opengist": "ghcr.io/thomiceli/opengist:1.13"}, "to": {"opengist": "ghcr.io/thomiceli/opengist:1.15"}, "digest": {"opengist": "sha256:7edc91273ee7d10a17406da8a08c803158baaff984c39b789c1313473d068f21"}, "verdict": "proven", "tested_at": "2026-09-23T19:39:21Z", "harness_version": 3, "evidence": "felhom.eu/documentation/audits/night-2026-09-23/apps/opengist/bench/evidence/MV-opengist/verdict.json", "box_evidence": "felhom.eu/documentation/audits/night-2026-09-23/apps/opengist/verdict.json", "memory_peak_pct": 77.8, "marks": {"files_may_change": false, "needs_person": null, "memory_tight": false}, "memory_basis": "anon", "memory_cgroup_peak_pct": 100.0}

templates/opengist/docker-compose.yml

@@ -8,7 +8,7 @@
 
 services:
   opengist:
-    image: ghcr.io/thomiceli/opengist:1.13
+    image: ghcr.io/thomiceli/opengist:1.15
     container_name: opengist
     restart: unless-stopped
     environment: