Verified: single app/single service image-only version update; local dry-run merge clean; compose config passed; image manifest exists.