image-policy P3 (#17) Batch B2 (tv): floating IfNotPresent -> Always

The tv/* media apps already carry keel force/match-tag/poll but IfNotPresent
defeated keel-force (BROKEN-A). Flip to Always so keel re-pulls moved :latest
digests -> clean Lane A. 11 apps (autobrr, bazarr, flaresolverr, pms-docker,
prowlarr, seerr, sftpgo, sonarr, tdarr, threadfin, threadfin-bis); pods roll.

Author: tillo

tv/autobrr-deploy.yml

@@ -23,7 +23,7 @@ spec:
       containers:
       - name: autobrr
         image: ghcr.io/autobrr/autobrr:latest
-        imagePullPolicy: IfNotPresent
+        imagePullPolicy: Always
         ports:
         - containerPort: 7474
         resources:

tv/bazarr-deploy.yml

@@ -23,7 +23,7 @@ spec:
       containers:
       - name: bazarr
         image: lscr.io/linuxserver/bazarr:latest
-        imagePullPolicy: IfNotPresent
+        imagePullPolicy: Always
         ports:
         - containerPort: 6767
         # Initial seed only — VPA Auto (vpa-objects/vpa-auto.yaml)

tv/flaresolverr-deploy.yml

@@ -21,7 +21,7 @@ spec:
       containers:
       - name: flaresolverr
         image: ghcr.io/flaresolverr/flaresolverr:latest
-        imagePullPolicy: IfNotPresent
+        imagePullPolicy: Always
         env:
         - name: TZ
           value: Europe/Zurich

tv/pms-docker-deploy.yml

@@ -23,7 +23,7 @@ spec:
       containers:
       - name: pms-docker
         image: plexinc/pms-docker:latest
-        imagePullPolicy: IfNotPresent
+        imagePullPolicy: Always
         ports:
         - containerPort: 32400
         resources:

tv/prowlarr-deploy.yml

@@ -23,7 +23,7 @@ spec:
       containers:
       - name: prowlarr
         image: lscr.io/linuxserver/prowlarr:latest
-        imagePullPolicy: IfNotPresent
+        imagePullPolicy: Always
         ports:
         - containerPort: 9696
         # Initial seed only — VPA Auto (vpa-objects/vpa-auto.yaml)

tv/seerr-deploy.yml

@@ -36,7 +36,7 @@ spec:
       containers:
       - name: seerr
         image: ghcr.io/seerr-team/seerr:latest
-        imagePullPolicy: IfNotPresent
+        imagePullPolicy: Always
         ports:
         - containerPort: 5055
         # Initial seed only -- VPA Auto (vpa-objects/vpa-auto.yaml) rewrites

tv/sftpgo-deploy.yml

@@ -36,7 +36,7 @@ spec:
       initContainers:
       - name: sftpgo-host-keys
         image: alpine:latest
-        imagePullPolicy: IfNotPresent
+        imagePullPolicy: Always
         terminationMessagePath: /dev/termination-log
         terminationMessagePolicy: File
         resources: {}
@@ -59,7 +59,7 @@ spec:
       containers:
       - name: sftpgo
         image: drakkan/sftpgo:v2-alpine
-        imagePullPolicy: IfNotPresent
+        imagePullPolicy: Always
         terminationMessagePath: /dev/termination-log
         terminationMessagePolicy: File
         args: ["sftpgo", "serve", "--config-file", "/etc/sftpgo/sftpgo.json"]
@@ -112,7 +112,7 @@ spec:
       - name: sftpgo-auth
         # Floating major-3 alpine tag; Keel watches digest, no explicit version pin.
         image: python:3-alpine
-        imagePullPolicy: IfNotPresent
+        imagePullPolicy: Always
         terminationMessagePath: /dev/termination-log
         terminationMessagePolicy: File
         command: ["python3", "/app/auth_server.py"]

tv/sonarr-deploy.yml

@@ -23,7 +23,7 @@ spec:
       containers:
       - name: sonarr
         image: lscr.io/linuxserver/sonarr:latest
-        imagePullPolicy: IfNotPresent
+        imagePullPolicy: Always
         ports:
         - containerPort: 8989
         # Initial seed only -- VPA Auto rewrites requests/limits. The 1c

tv/tdarr-deploy.yml

@@ -28,7 +28,7 @@ spec:
       containers:
       - name: tdarr
         image: ghcr.io/haveagitgat/tdarr:latest
-        imagePullPolicy: IfNotPresent
+        imagePullPolicy: Always
         ports:
         - containerPort: 8265
         # Tdarr is a transcoder: scales to all available CPU when a job

tv/threadfin-bis-deploy.yml

@@ -23,7 +23,7 @@ spec:
       containers:
       - name: threadfin
         image: registry.mdapi.ch/mdapi/threadfin:latest
-        imagePullPolicy: IfNotPresent
+        imagePullPolicy: Always
         ports:
         - containerPort: 34400
         env: