Fixed
Manual "Update all" now applies the same group gates as scheduled auto-updates (#2, @famewolf).
@famewolf spotted a recurring pattern: bugs that only hit the manual path because it had drifted from the auto path. Audited both — the manual path was missing two group behaviours. It now (1) processes containers in Container-Group order and (2) skips the rest of a group once a member fails (so a failed Gluetun head no longer leaves Docksentry recreating its dependents against a broken namespace), plus honours the inter-member wait_seconds.
The maintenance-window filter and the ask-before-major confirmation gate stay intentionally auto-only: tapping "Update all" is itself the explicit "do it now, majors included".
A deeper unification (manual + auto as thin triggers over one shared per-container routine — also @famewolf's idea) is tracked as a follow-up refactor.
