Stage: bump the appstore pin to 1.4.5 (uv 0.13.5, LibreChat unchanged at 0.8.8)

Not deployed. Diffed against the official 1.4.5 manifest: version, changelog and
the base-image tag were the only differences, so this copy now matches official
field-for-field except dockerImage (+ our scheduler block).

The risk is the overlay, not the bump: every build-time patch runs against a new
base layer, and they are all non-fatal by design, so a silent no-op is the failure
mode. Verify on the rendered DOM. Rollback = repoint dockerImage to
20261023-65a38bb.

Dockerfile

@@ -18,7 +18,7 @@
 #   3. This image changes ONLY static brand assets. All behavior lives on the
 #      persistent volume (/app/data/librechat.yaml, /app/data/env,
 #      /app/data/mcp/) and survives image updates unchanged.
-FROM cloudron/ai.librechat.cloudronapp:202610150224320000
+FROM cloudron/ai.librechat.cloudronapp:202610230221180000
 
 # Login-page + header logo (the client bundle references assets/logo.svg)
 COPY assets/logo.svg /app/code/librechat/client/dist/assets/logo.svg