v0.351.0 (unreleased): old -rc controller images and old infra images are deleted (decision 56 amended, decision 285)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

controller/cmd/controller/main.go

@@ -2062,6 +2062,10 @@ func main() {
 			prevCtl = st.RecordedPrevious(Version)
 		}
 		_, _ = stackMgr.RetainControllerImages(stacks.ControllerImageRecord{Repo: cfg.SelfUpdate.Image, Running: Version, Previous: prevCtl})
+		// decision 285 (2026-11-09): the pinned infrastructure images (traefik, cloudflared, FileBrowser, Samba) — keep
+		// the pin and the one before it. A pin moves only with a controller release, so once per start is enough; the
+		// infra stacks were reconciled long before these 3 minutes. Retried every 2 minutes while an app pulls (R-863).
+		stackMgr.RunInfraImageRetention(ctx, infra.Images(), 2*time.Minute, 30)
 	}()
 
 	// --- Initialize API router ---