feat(sidecar): check for a new image every 30 seconds

feat(sidecar): check for a new image every 30 seconds

fix(sidecar): cap the container's memory and processes

fix(sidecar): run the boot script under sh, and wait for apt

fix(sidecar): name the static IP apart from the instance

docs(sidecar): publish the image and wait for the pull

refactor(sidecar): leave ssh to the browser console

feat(sidecar): email when the sidecar's health check fails

fix(scripts): drop the count from verify-deploy's new-kinds line

test(serve): start the previous release on a directory this one wrote

docs(conformance): count the commit reserve, and say when #sync goes out

docs(plan): close dedupe-audit, tick done tasks, fix stale BUILT cap

test(scenarios): resume a firehose consumer across a deploy

fix(serve): bound listRecords per address and by page bytes

docs(plan): cut tree-quotas to one page

feat(serve): serve app.bsky.actor.getPreferences and putPreferences

fix(operator): bound a VPS server's disk and keep its journal

docs(operations): describe the restore drill

docs: add the dev box guide

fix(serve): name the homepage's operator by handle, and drop the claim row

docs: say where the lexicons live, how to publish them and how to check