Consume the injected CONTAINERIZED flag: expose it on /app/version, block the update endpoints + console command, and show a 'docker compose pull' panel instead of the updater. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>