feat: project-scoped Docker image prune, conflict fix, deploy toggle, access list picker

- Image prune only removes images matching project image refs, skips active instances
- Add ListImagesByRef and RemoveImage to Docker client
- Fix 409 conflict: use listProjects instead of duplicate POST
- Add "Deploy immediately" toggle to Quick Deploy (off by default)
- Replace raw access list ID with EntityPicker on project edit form
- Trigger proxy resync on access list change
- Fix stage form layout: single responsive row
- Fix empty port default on project creation
- Improve inspect error message for remote Docker

web/src/lib/api.ts

@@ -276,6 +276,12 @@ export function listProxyRoutes(): Promise<ProxyRoute[]> {
 	return get<ProxyRoute[]>('/api/proxies');
 }
 
+// ── Docker Management ──────────────────────────────────────────────
+
+export function pruneImages(): Promise<{ images_removed: number; space_reclaimed_mb: number }> {
+	return post<{ images_removed: number; space_reclaimed_mb: number }>('/api/docker/prune-images');
+}
+
 export function testNpmConnection(data: { npm_url?: string; npm_email?: string; npm_password?: string }): Promise<{ status: string }> {
 	return post<{ status: string }>('/api/settings/npm/test', data);
 }