docs: REPORT + CONTEXT for v0.112.0 (deployed + live-proven credential-less on demo)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6

CONTEXT.md

@@ -7,7 +7,20 @@
 >
 > Ask Claude Code: "Please update CONTEXT.md with what we did today"
 
-Last updated: 2026-07-10 (v0.111.0 — remote app-log diagnostics; pairs with hub v0.43.0)
+Last updated: 2026-07-10 (v0.112.0 — anonymous registry self-update; pairs with hub v0.43.1)
+
+> **2026-07-10 — v0.112.0: self-update without credentials (LIVE on 9201, pairs with hub v0.43.1).**
+> Root cause on Peti's box: the updater refused without Git Sync creds, but the public package is
+> anonymously pullable. `queryRegistry` now does the Docker v2 anonymous token dance when both creds are
+> empty (realm/service parsed FROM the WWW-Authenticate header — never hardcoded); `pullImage` skips
+> `docker login` credential-less; creds path byte-unchanged (private catalogs); half-configured pair =
+> loud misconfig; denial = "registry denied anonymous access — a private registry requires Git Sync
+> credentials". Settings panel gains the mode line "Registry: nyilvános (hitelesítés nélkül) /
+> hitelesített" — credential-less is a supported mode, not an error. Red-proof green (old guard restored
+> → anonymous tests fail with the old message). LIVE-PROVEN on the credential-less demo (git creds are
+> quoted-empty): /api/selfupdate/check → ok, latest=0.112.0, no error; settings shows "nyilvános".
+> PENDING OPERATOR: floor-bump Peti to 0.112.0, then delete his temp Git Sync creds → clean "nyilvános"
+> check. runCommand/runCommandStdin are now package VARS (test seam).
 
 > **2026-07-10 — v0.111.0: remote app-log diagnostics (LIVE on 9201, pairs with hub v0.43.0).** The
 > telemetry scraper now attaches `LogIssue.Context` (±5 raw lines around the FIRST occurrence of each