feat: project-scoped Docker image prune, conflict fix, deploy toggle, access list picker

- Image prune only removes images matching project image refs, skips active instances
- Add ListImagesByRef and RemoveImage to Docker client
- Fix 409 conflict: use listProjects instead of duplicate POST
- Add "Deploy immediately" toggle to Quick Deploy (off by default)
- Replace raw access list ID with EntityPicker on project edit form
- Trigger proxy resync on access list change
- Fix stage form layout: single responsive row
- Fix empty port default on project creation
- Improve inspect error message for remote Docker

.claude/settings.json

@@ -11,7 +11,8 @@
       "Bash(git checkout:*)",
       "Bash(git stash:*)",
       "Bash(echo \"EXIT: $?\")",
-      "Bash(./scripts/dev-server.sh)"
+      "Bash(./scripts/dev-server.sh)",
+      "Bash(go doc:*)"
     ],
     "additionalDirectories": [
       "C:\\Users\\Alexei\\Documents\\docker-watcher\\internal",