Updating

The update script takes a hot backup, pulls the new image, restarts, and health-checks. A short restart blip is expected; backups land in ./backups/.

./deploy/update.sh                 # latest
./deploy/update.sh --tag 0.3.0     # pin a version (recommended)

If a new version is unhealthy, the script prints rollback steps. Images are multi-arch (amd64 + arm64) on ghcr.io/cauu/ouro-pass.