Port of image_version.sh with a contract test (16 cases computed by the old script's Python). For apps with real updates, status sends a manifest that pins a digest only or a floating tag (dockge, grafana) to image_version, which takes the version from the OCI or LinuxServer label and hands it to image_tags; no usable label is STOP version_unknown. inspect exposes only the version labels. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>