[bobdivx]

Summary

• Allow DevForge self-update from the UX on ZimaOS/CasaOS when SSH to host.docker.internal:22 is down.
• Grant www-data access to the mounted Docker socket at boot (group + ACL).
• Ship Docker CLI in the API image so local upgrade.sh can talk to the engine.
• Prefer local docker.sock upgrade; SSH only as secondary fallback.
• Add Pest coverage for the ZimaOS 660 root:docker socket case.

Why

The UX error about localhost SSH unreachable happened because canRunLocalDockerUpgrade() only checked is_readable() on the socket while PHP runs as www-data.

Test plan

• ZimaOS: Settings -> Mettre a jour maintenant works without host SSH
• After boot, www-data in api can run docker info
• Unit: InstanceUpgradeServiceTest for evaluateLocalDockerUpgrade
• First jump onto this image may still need a store/pull; later updates via UX only