More apps update themselves at night (30+2 -> 35+3); the same-name security-fix gap measured (R-740, decision for the operator)

- Twelve steps published on both venues (catalog): first ladders for calibre-web, gitea, wger,
  crafty-controller, uptime-kuma, zipline (two steps); within-major emby, ghost, home-assistant,
  outline, rallly. immich's step v3.0.3 -> v3.2.2 re-proven at 768M (Part D).
- Part C: the night leg skips a digest-only change AND the catalog never records a same-tag re-test,
  so a same-name upstream fix reaches no box. Row R-740; the decision in STATUS; `09` decision 30
  carries a dated note (the decision itself unchanged).
- Rows: 369 -> 377. Opened R-735..R-742; closed R-735, R-738, R-742; narrowed R-462, R-624, R-446,
  R-440, R-734, R-732. The currency audit gains §1b (and corrects its 31+1 to 30+2).

Evidence: documentation/audits/more-night-apps-2026-09-30/. Report: REPORT-more-night-apps-2026-09-30.md.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

documentation/architecture/09-update-architecture.md

@@ -369,6 +369,12 @@ R-636's louder repeated alarm.
     wants the TESTED image pulled, and slice 3's ruling freezes the version until a deliberate Update;
     (a) broke the second. Shipped as controller **v0.269.1** — a second release in the session, instead of
     shipping (a) to the fleet with the floor.
+    *Note 2026-09-30 (R-740) — the cost line above is not what the code does.* „(or the automatic leg)": the
+    automatic leg never presses a digest-only change (`unattended.go:433–435`, skip `no_test_record`). And the
+    catalog never writes a re-test of a floating tag at a new digest (the writer refuses a step that moves no
+    image), so a same-name upstream fix reaches no box by either route today. Measured, with the options, in
+    R-740; the decision is the operator's (STATUS 2026-09-30). This decision's ruling — the sync never moves
+    an installed app's digest — is unchanged.
 
 ### 2026-09-25 (night) — three decisions taken by CC unattended, building §6.4 part 7