v0.284.2 — the image clean-up sees digest-pulled (untagged) images (decision 53, R-736)

Found live on 9202: the product pins tag@digest, and such images are stored untagged (repo:<none>);
`docker image ls` without -a did not list them, so the retention saw almost no app image. Now `image ls -a`;
an anonymous <none>:<none> entry is never a candidate; the one-time marker is v2 so the corrected sweep runs
once everywhere. Test TestImageRetention_SeesUntaggedDigestPulledImages, red-proofed. 0.284.0/0.284.1 were
never floored.

MinAgent: 0.131.0 (unchanged).

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

REPORT.md

@@ -1,4 +1,7 @@
-# REPORT — v0.284.0 + v0.284.1 (2026-09-30 late evening)
+# REPORT — v0.284.0 + v0.284.1 + v0.284.2 (2026-09-30 late evening)
+
+- **v0.284.2:** the retention lists images with `-a` — digest-pulled app images are untagged and were invisible (found
+  live on 9202); marker `image-retention-v2.done`. 0.284.0/0.284.1 were never floored.
 
 - **v0.284.1:** the remove half of decision 53 wired into `RemoveStack` (the household's Remove button — v0.284.0 wired only
   `DeleteStack`, found live on 9202); one summary line per retention pass. v0.284.0 was never floored (9202 only).