feat(releasesource): new-release checker works out of the box

Seed docker base sources by default (migration 000024, revision-aware
generator), github tags-API fallback, self-contained deeps-scan CLI
release checks, UI/worker release alerts, Released column + Releases tab.