fix(image-deploy): monotonic tag guard — refuse backwards newTag writes
validate / validate (pull_request) Successful in 4s
[bug-nxhza9j2atqk] image-deploy: skip direct push when open PR already targets same tag
validate / validate (pull_request) Successful in 5s