Fixed

• Updater redeploying every poll cycle due to url.PathEscape encoding / in image names, causing InspectImage to fail on Docker API lookups

• Removed url.PathEscape from image path parameters (InspectImage, TagImage, RemoveImage) to match Docker SDK behavior

• Added container-based fallback for local digest resolution: if image inspect by reference fails, resolves via running container’s image ID

• Swallowed errors from InspectImage now logged for debuggability