Record the decision-overview rollout and pin its image in admission inputs

Operator rolled out sha256:971e88e3 after a pre-rollout inspect (7 confirmed,
no unresolved submissions) and an in-volume backup. README backup path now
matches the deployment, which mounts no /backup volume.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 359683@bnt-lap001
Assistant-Session: eebdc939-7a9b-4e50-9d39-c8437e8a14ec

docs/evidence/2026-09-21-decision-overview-image.json

@@ -6,6 +6,25 @@
   "image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:971e88e3c7b68b370f4d7ef14824cc0e19c854b5aeb372e7ec7edbcf2c847b31",
   "previous_live_image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:ef6fdd61209863654be3adba070661645a2714e86cb4b7f4e847540291b55f07",
   "published": true,
-  "rolled_out": false,
-  "remaining": "Operator pre-rollout inspect/backup and rollout; agent production access was not granted."
+  "rolled_out": true,
+  "remaining": "Human sign-in view of the overview not yet observed by the agent.",
+  "rollout": {
+    "by": "operator",
+    "strategy": "Recreate via kubectl set image",
+    "pre_rollout_inspect": {
+      "schema_version": 2,
+      "outbox": {
+        "delivered": 50
+      },
+      "submissions": {
+        "confirmed": 7
+      }
+    },
+    "pre_rollout_backup": "/data/private/review-20260921-pre-overview.sqlite (same PVC; consistent_snapshot true)",
+    "post_rollout": {
+      "ready_replicas": 1,
+      "healthz": "ok",
+      "readyz": "ready"
+    }
+  }
 }