v8.9.0-dev.3

• Merge pull request #1699 from kaitranntt/kai/fix/cliproxy-safe-updates-dev
• fix(docker): target live cliproxy compose stack
• chore(hardening): refresh source inventory
• docs(docker): document host continuity
• fix(cliproxy): finish concurrent update recovery
• chore(hardening): refresh source inventory
• fix(cliproxy): harden update recovery paths
• fix(cliproxy): keep proxy available during updates