Watchtower recreated containers outside their podman-compose pod, which took
gitea down for three days on 2026-08-14 while reporting failed=0. It is retired.
Deploys now SSH to the VPS and restart the systemd unit, so podman-compose
rebuilds the project properly. The key is pinned to a forced command that only
accepts a service name.
Still non-fatal: the image is already pushed and podman-update.timer sweeps at
midnight, so a trigger failure delays the deploy rather than failing the build.
