Fix lscr.io image update verification; tighten Docker widget

lscr.io is backed by ghcr.io and requires a GitHub token for registry
auth — passing it fixes the silent null return from the token endpoint.
Widget now shows only confirmed outdated/current containers, with
unverified and unsupported-registry images summarised as a footer count.

server/routes/updates.ts

@@ -119,7 +119,8 @@ async function getGhcrLatestDigest(image: string, tag: string): Promise<string |
 }
 
 async function getLscrLatestDigest(image: string, tag: string): Promise<string | null> {
-  return getGenericRegistryDigest('lscr.io', image, tag)
+  // lscr.io is backed by ghcr.io and requires the same GitHub token auth
+  return getGenericRegistryDigest('lscr.io', image, tag, process.env.GITHUB_TOKEN)
 }
 
 router.get('/docker', async (_req, res) => {