v2.0.1

Bug-fix release. Fixes a fresh-install blocker where several services referenced images that no longer exist, plus documentation and configurability improvements. No breaking changes — existing deployments need no action.

Fixes

• Fresh docker compose up -d now works — four services referenced images that don't exist in any registry, causing the pull to fail on a clean install (#42):
  • watchlistarr/watchlistarr → nylonee/watchlistarr
  • cleanarr/cleanarr → selexin/cleanarr
  • requestrr/requestrr → thomst08/requestrr
  • ghcr.io/aetaric/checkrr:latest → :latest-amd64 (checkrr publishes no multi-arch tag)
• Seerr first-boot permissions documented (#43) — Seerr runs as a fixed non-root node user and ignores PUID/PGID, so its config directory must be pre-created and owned by your PUID:PGID. Added a Getting Started step (with .env loading) to prevent the EACCES: permission denied, mkdir '/app/config/logs/' crash.

Improvements

• Configurable checkrr architecture tag — CHECKRR_IMAGE_TAG (defaults to latest-amd64); arm64 hosts set CHECKRR_IMAGE_TAG=latest-arm64v8 in .env instead of editing docker-compose.yml.
• CI workflow permissions hardened (CodeQL alert).

Full Changelog: v2.0.0...v2.0.1