The original containrrr/watchtower was archived in December 2025 and its
Docker API client (v1.25) is rejected by modern Docker engines, breaking
automatic updates. The nicholas-fedor/watchtower fork is actively
maintained, supports current Docker API versions and is a drop-in
replacement - it keeps the com.centurylinklabs.watchtower.* labels and
all the flags we use.

Impacts: miner, miner-runner, validator, validator-runner