feat(hub): implement native in-app container updates

Introduces the ability for registered users to trigger Beszel container updates directly from the web interface.

- Added `app_update` logic to the hub to pull the latest image from GHCR and recreate the container.
- Implemented `/api/beszel/update` and `/api/beszel/update/apply` endpoints.
- Added a new `AppUpdatePanel` in the settings UI to check for and apply updates.
- Added update notifications in the navbar and settings.
- Updated `docker-compose.yml` and `README.md` to include the required Docker socket mount for update functionality.
- Added a new public status page route that bypasses authentication.
- Refactored several TypeScript interfaces to replace `any` with `unknown` or specific types for better type safety.
- Updated localization files to support new update-related strings.

internal/hub/app_update_test.go

@@ -0,0 +1,48 @@
+package hub
+
+import "testing"
+
+func TestParseBearerChallenge(t *testing.T) {
+	challenge := `Bearer realm="https://ghcr.io/token",service="ghcr.io",scope="repository:dvorinka/beszel:pull"`
+
+	params := parseBearerChallenge(challenge)
+
+	if params["realm"] != "https://ghcr.io/token" {
+		t.Fatalf("realm = %q", params["realm"])
+	}
+	if params["service"] != "ghcr.io" {
+		t.Fatalf("service = %q", params["service"])
+	}
+	if params["scope"] != "repository:dvorinka/beszel:pull" {
+		t.Fatalf("scope = %q", params["scope"])
+	}
+}
+
+func TestFindRepoDigest(t *testing.T) {
+	digests := []string{
+		"ghcr.io/other/image@sha256:111",
+		"ghcr.io/dvorinka/beszel@sha256:222",
+	}
+
+	got := findRepoDigest(digests, "dvorinka/beszel")
+	if got != "ghcr.io/dvorinka/beszel@sha256:222" {
+		t.Fatalf("digest = %q", got)
+	}
+}
+
+func TestDigestValue(t *testing.T) {
+	for _, tc := range []struct {
+		name string
+		in   string
+		want string
+	}{
+		{name: "repo digest", in: "ghcr.io/dvorinka/beszel@sha256:abc", want: "sha256:abc"},
+		{name: "plain digest", in: "sha256:def", want: "sha256:def"},
+	} {
+		t.Run(tc.name, func(t *testing.T) {
+			if got := digestValue(tc.in); got != tc.want {
+				t.Fatalf("digestValue(%q) = %q, want %q", tc.in, got, tc.want)
+			}
+		})
+	}
+}