v1.36.0 — Versions in the Updates-Available notification

Added

• Version in the "Updates Available" notification (#44, @LeeNX) — each container line now shows 🔖 v_old → v_new (or the current version when only one side is known). Old version comes from the local org.opencontainers.image.version label (fallback: a SemVer tag); the new version is read from the remote image's OCI config blob before anything is pulled (multi-arch indexes resolve to the linux/amd64 config). Best-effort — images without the label show no badge, and a registry hiccup never affects the check. The remote lookup runs only for the few containers that actually have a pending update, so it adds no per-check overhead.

Full 19-script regression sweep green.