First apply deleted 38 stale versions; enable schedule with live-images protection file for worker pods without kubectl; restore path for live state-hub tags after an unprotected worker apply.
Add forgejo_package_prune query, weekly activity-definition (disabled), State Hub evidence sink support for shell sources, and runbook notes.