images from IPCR (ipcr-watch.nsl.sh/ipns/metadec.eth) at the first gitea-built releases

CLAUDE.md

@@ -41,8 +41,9 @@ grep -rn 'gh/Worph/AppStore@main' Apps/   # must be empty
   `caddy_0` gateway domain (`appname-${APP_DOMAIN}`, `gateway_tls` import),
   `caddy_1` nip.io, `caddy_2` sslip.io (Let's Encrypt, no import)
 - **`store_app_id`** is the lowercased app name (`MetaFeederTMDB` → `metafeedertmdb`)
-- **Images**: `ghcr.io/worph/meta*` pinned to `:latest` on purpose; the Yundera
-  perimeter images (`nginx-hash-lock`, `appshield`) stay version-pinned
+- **Images**: pulled from IPCR on watch.nsl.sh, `ipcr-watch.nsl.sh/ipns/metadec.eth/metadec.eth/<image>:<version>`,
+  pinned to explicit versions (built by each repo's `.gitea/workflows/` on gitea-watch.nsl.sh/metastar on `v*` tags;
+  ghcr.io/worph is no longer published). The Yundera perimeter images (`nginx-hash-lock`, `appshield`) stay on ghcr.io/yundera
 - **Install order**: `MetaCore` first — every other app depends on it
 - **Multi-language**: descriptions/taglines carry `en_us`, `fr_fr`, `es_es`, `zh_cn`, `ko_kr`, `de_de`