Blind container update

Watchtower Is Archived: Replace Blind Container UpdatesNew!!

A documentation-backed, testable runbook for Watchtower Is Archived: Replace Blind Container Updates, with safe defaults, validation evidence, failure modes, rollback, and publication-day checks.