The previously-deferred dockerfile manager is live: it manages docker/Dockerfile (mcr dotnet bases + internal ersatztv-ffmpeg) and reads the HTTP-only Gitea registry via a RENOVATE_HOST_RULES host rule (insecureRegistry + read creds) set in the workflow env. Vestigial arm/ffmpeg-tests Dockerfiles excluded; compose manager unused (build-only). refs server-management#484 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>