Sync the self-hosting stack

docker-compose.yml

@@ -257,7 +257,12 @@ services:
   # Delete this service and unset BROWSER_URL if you would rather Jarvis had no web access. Nothing
   # else stops working; the two web tools report themselves unavailable.
   browser:
-    image: ${JARVIS_IMAGE_BROWSER:-git.luxit.be/luxit/jarvis-browser:stable}
+    # Pinned to a VERSION rather than to :stable, unlike the other three, and the reason is honest
+    # rather than stylistic: nothing has promoted a browser to stable yet, because promotion means
+    # "this ran on a canary" and the canary does not deploy one — it is opt-in there too. So :stable
+    # does not exist for this image, and defaulting to a tag that 404s would be a worse first
+    # five minutes than a pin. It moves to :stable once a canary has actually run one.
+    image: ${JARVIS_IMAGE_BROWSER:-git.luxit.be/luxit/jarvis-browser:0.1.0}
     # OPT-IN. A profiled service does not start unless you ask for it:
     #     COMPOSE_PROFILES=browser docker compose up -d
     # Web access is a decision, not a default — an assistant that can read the internet is a new