immich: v2.5.5 -> v3.0.3 [MAJOR], postgres -> 16-vectorchord0.4.3-pgvectors0.2.0

MAJOR: immich v3.0.0 drops pgvecto.rs support and requires VectorChord. Our pin
was already VectorChord, so fresh deploys are unaffected; an in-place update from
a pgvecto.rs-era install would need the upstream migration first.

Postgres sidecar moved to the vectorchord/pgvectors extension versions immich
v3.0.3 ships in its own compose (0.4.3 / 0.2.0), keeping our PG major (16)
rather than upstream's 14 to avoid a needless major change.

NOTE (recorded, not fixed): upstream v3 migrated redis -> valkey:9. Kept
redis:7-alpine here; the swap is a structural change, not a pin bump.

Campaign 7 catalog sweep.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Nn3VgQk9iwEGgyx6QJ2NvE

templates/immich/docker-compose.yml

@@ -27,7 +27,7 @@
 
 services:
   immich-server:
-    image: ghcr.io/immich-app/immich-server:v2.5.5
+    image: ghcr.io/immich-app/immich-server:v3.0.3
     container_name: immich-server
     restart: unless-stopped
     depends_on:
@@ -68,7 +68,7 @@ services:
       - "traefik.http.services.immich.loadbalancer.server.port=2283"
 
   immich-machine-learning:
-    image: ghcr.io/immich-app/immich-machine-learning:v2.5.5
+    image: ghcr.io/immich-app/immich-machine-learning:v3.0.3
     container_name: immich-machine-learning
     restart: unless-stopped
     environment:
@@ -90,7 +90,7 @@ services:
       start_period: 120s
 
   immich-postgres:
-    image: ghcr.io/immich-app/postgres:16-vectorchord0.3.0
+    image: ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0
     container_name: immich-postgres
     restart: unless-stopped
     environment: