chore: refresh Sealos template image versions

[yangchuansheng]

Summary

• Refresh Sealos template image versions for 26 templates from the generated update queue.
• Keep the batch limited to 45 candidates that passed focused docker-to-sealos artifact validation.
• Record 228 blocked candidates where docker-to-sealos validation reported existing template rule failures beyond this image refresh scope.

Updated templates

• appwrite (3 candidates)
• cobalt (1 candidate)
• derper (2 candidates)
• dolibarr (1 candidate)
• evolution-api (2 candidates)
• ghost (2 candidates)
• grafana (1 candidate)
• jellyfin (1 candidate)
• langflow (1 candidate)
• listmonk (2 candidates)
• litellm (1 candidate)
• logto (1 candidate)
• loki (1 candidate)
• matomo (2 candidates)
• mautic (3 candidates)
• meilisearch (1 candidate)
• minecraft (2 candidates)
• netbird (4 candidates)
• node-red (1 candidate)
• openobserve (1 candidate)
• paperclip (1 candidate)
• prestashop (2 candidates)
• pterodactyl (3 candidates)
• stalwart (1 candidate)
• trendradar (1 candidate)
• typebot (4 candidates)

Reports

• Update report: .sealos/update-reports/template-version-updates.md
• Machine-readable candidates: .sealos/update-reports/template-version-updates.json
• Queue and final statuses: .sealos/update-reports/template-update-queue.json
• Status summary: .sealos/update-reports/template-update-status.md
• Blocked template list: .sealos/update-reports/blocked-template-list.md
• Artifact validation evidence: .sealos/update-reports/docker-to-sealos-artifact-validation.json

Blocked candidates

• 121 queued templates / 228 candidates were blocked after per-artifact docker-to-sealos validation.
• Common blocker categories include existing metadata, ingress, resource ladder, image pull secret, database Job, and legacy template structure violations.
• Full per-template evidence and sample validator findings are recorded in .sealos/update-reports/docker-to-sealos-artifact-validation.json and .sealos/update-reports/template-update-status.json.

Validation

• git diff --check upstream/kb-0.9...HEAD passed.
• python3 -c 'import yaml' failed on the default interpreter, so validation used /opt/homebrew/Caskroom/miniforge/base/bin/python3.
• Repository-local scripts/check_consistency.py and scripts/quality_gate.py are absent in this checkout.
• /opt/homebrew/Caskroom/miniforge/base/bin/python3 scripts/path_converter.py --self-test passed.
• /opt/homebrew/Caskroom/miniforge/base/bin/python3 scripts/test_check_consistency.py passed: 101 tests.
• /opt/homebrew/Caskroom/miniforge/base/bin/python3 scripts/test_compose_to_template.py passed: 33 tests.
• /opt/homebrew/Caskroom/miniforge/base/bin/python3 scripts/test_check_must_coverage.py passed: 4 tests.
• /opt/homebrew/Caskroom/miniforge/base/bin/python3 scripts/check_must_coverage.py --skill SKILL.md --mapping references/must-rules-map.yaml --rules-file references/rules-registry.yaml passed.
• /opt/homebrew/Caskroom/miniforge/base/bin/python3 scripts/check_consistency.py --skill SKILL.md --references references --rules-file references/rules-registry.yaml --artifacts "$ABS_ARTIFACTS" passed for 26 changed artifacts: 40 rules.
• DOCKER_TO_SEALOS_ARTIFACTS="$ABS_ARTIFACTS" /opt/homebrew/Caskroom/miniforge/base/bin/python3 scripts/quality_gate.py passed.

Branch

• Head: yangchuansheng:codex/template-version-refresh-20260708
• Base: labring-actions/templates:kb-0.9