A proof branch, not for main: the route-forwarding bed reads this module's literal image and would break until the module is built. The modelling is right regardless — the image is upstream, so the mesh should mirror it once into its own registry and pin what that registry assigned, rather than every machine fetching a reference somebody else can move. Claude-Session: https://claude.ai/code/session_01D6qtiYU3P9jk3pnAXyAFyx