Blind container update

Watchtower Is Archived: Replace Blind Container Updates

Replace unattended Watchtower changes with an owned process for release discovery, image selection and deployment approval. Keep application data recovery separate from pinning or reverting a container image.