Regression coverage for:
- Bug #3: sha256: prefix comparison — tests the stripSha helper and the
imageMatch logic as used in verifyStatelessRecreated()
- Bug #7 / #6: registry file must exist and have all required fields;
no app may use deploy_mode=webhook (webhook path retired)
Run: REGISTRY_FILE=<path> node --test test/registry-loader.test.js
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>