crafty-controller: 4.10.7 -> 4.11.0, its first ladder step, both venues proven (R-462)

A new front-door fixture: crafty's own API v2 (login as admin, a role created and read back, a
wrong-token control), reached over its own HTTPS port on the bench as traefik reaches it on a box.
Bench 9401 (harness v4, swap 0): proven, 10-min watch 0 kills (anon peak 2.7 % of 2048M); the abort
starts and serves. Box 9202: done in 51.3 s, the role read back. Written by upgrade-test.py --write-ladder.

Evidence: felhom.eu/documentation/audits/more-night-apps-2026-09-30/

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

templates/crafty-controller/.felhom.yml

@@ -10,7 +10,7 @@ subdomain: "minecraft"
 slug: "crafty-controller"
 # catalog_since: the date THIS repo last changed this app's pinned images. Any commit that
 # changes an image: line must set this to the same day (see CLAUDE.md).
-catalog_since: "2026-06-26"
+catalog_since: "2026-09-30"
 
 # --- Resource hints (displayed on deploy screen) ---
 resources:
@@ -123,3 +123,9 @@ i18n:
         description: 'The first password of Crafty''s admin user (admin) - this is what signs you in'
     initial_credentials:
       note: 'The first admin password (the one set at install time). Change it in Crafty after your first sign-in - this card keeps showing the first password.'
+
+# update_ladder — the test record: one tested step per line, oldest first (JSON flow mappings,
+# `09-update-architecture.md` §6.4 part 4). WRITTEN BY scripts/upgrade-test.py, never by hand;
+# gated by scripts/check-test-record.py. An image: move without a proven entry here is refused.
+update_ladder:
+  - {"from": {"crafty-controller": "registry.gitlab.com/crafty-controller/crafty-4:4.10.7"}, "to": {"crafty-controller": "registry.gitlab.com/crafty-controller/crafty-4:4.11.0"}, "digest": {"crafty-controller": "sha256:7b6e87514259549647e15ceeaf73d238792e6d77e2c79fc744d5badc8d6e997c"}, "verdict": "proven", "tested_at": "2026-09-30T16:37:55Z", "harness_version": 4, "evidence": "felhom.eu/documentation/audits/more-night-apps-2026-09-30/bench/apps/crafty-controller/bench/evidence/MV-crafty-controller/verdict.json", "box_evidence": "felhom.eu/documentation/audits/more-night-apps-2026-09-30/box/crafty-controller/step.txt", "memory_peak_pct": 2.7, "marks": {"files_may_change": false, "needs_person": null, "memory_tight": false}, "memory_basis": "anon", "memory_cgroup_peak_pct": 8.0}

templates/crafty-controller/docker-compose.yml

@@ -17,7 +17,7 @@
 
 services:
   crafty-controller:
-    image: registry.gitlab.com/crafty-controller/crafty-4:4.10.7
+    image: registry.gitlab.com/crafty-controller/crafty-4:4.11.0
     container_name: crafty-controller
     restart: unless-stopped
     environment: