Bug bash 2: 11 bugs in Stacks, Alerts, Docker, skins and the installer, fixed and verified (BUGS.md)

Stacks: deploy with every compose file (labels from inspect, not comma-joined ps);
refuse a stale overwrite; empty list without Docker. Alerts: firing state survives a
restart without re-announcing; vanished alerts are recorded as cleared with the reason;
rule values validated; 200 rules. Docker: 404 for a removed container's logs. Skins: four
palettes lifted to readable contrast. Phone: bigger toggles and swatches. Installer:
deploy republishes; an older published build is never installed silently.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

Makefile

@@ -2,6 +2,7 @@
 VERSION ?= $(shell git describe --tags --always 2>/dev/null || echo dev)
 GO      ?= go
 PREFIX  ?= /usr/local/bin
+PUBLISH ?= /home/core/apps/hamlab-demo/site
 
 # every architecture a release carries; arm is ARMv6 hard-float, so it covers every Raspberry Pi
 ARCHES  ?= amd64 arm64 arm 386 riscv64
@@ -53,6 +54,9 @@ test:
 deploy: build cross
 	./bin/hamlab install --prefix $(PREFIX)
 	@sleep 1; $(PREFIX)/hamlab push-nodes || true
+	@# The public installer must never lag the fleet: it would offer everyone an older build, and
+	@# "upgrade" a current machine backwards. Publish only where this hub serves the download site.
+	@if [ -d $(PUBLISH) ]; then $(MAKE) --no-print-directory publish; fi
 
 # push the installed binary to every managed machine (what deploy does last)
 push-nodes:
@@ -68,7 +72,6 @@ clean:
 # Put the release where `curl -fsSL https://hamlab-demo.bigham.dev/install.sh | sh` finds it:
 # the static site beside the demo page (nginx, public through NPM). Binaries first, VERSION
 # last, so nobody is ever pointed at files that aren't there yet.
-PUBLISH ?= /home/core/apps/hamlab-demo/site
 publish: release
 	mkdir -p $(PUBLISH)/dl
 	cp dist/hamlab-linux-* dist/SHA256SUMS $(PUBLISH)/dl/