[architect] refactor: single source of truth for image-name → upstream repo routing

[kubestellar-hive]

Refactor

Cluster: image-name/tag → upstream GitHub repository routing.
Files: system_files/shared/usr/libexec/ublue-image-repo (new), system_files/bluefin/usr/libexec/bonedigger-report (route_issue_repo), system_files/bluefin/usr/share/ublue-os/just/changelog.just (changelogs), tests/test_image_repo.bats (new), tests/test_bonedigger_report.bats, tests/test_changelog.bats.

common decided "which upstream repo owns this image" in two places with two different grammars:

site	dakota match	unknown image
bonedigger-report:route_issue_repo	dakota* glob	projectbluefin/common
changelog.just:changelogs	== "dakota" exact	projectbluefin/bluefin

They had already drifted. dakota-nvidia is a published image (docs/skills/image-registry.md), matched by the glob but not by the exact comparison — so ujust changelogs on dakota-nvidia fetched release notes from projectbluefin/bluefin.

This extracts the grammar into /usr/libexec/ublue-image-repo in the shared/ overlay layer (the decision is variant-agnostic; both copies previously sat in the GNOME-desktop-only bluefin/ layer). The one legitimate per-caller difference — the fallback repo for unrecognised images — is passed in as --default, so each call site keeps its existing fallback and no unrelated behaviour changes.

Both consumers become one-line delegations. tests/test_image_repo.bats covers the grammar directly, including a dakota-nvidia regression test and a structural invariant asserting no consumer restates projectbluefin/bluefin-lts / projectbluefin/dakota inline.

Verification: bats tests/test_image_repo.bats tests/test_bonedigger_report.bats tests/test_changelog.bats — 46/46 pass.

Overlap check: #1010 also touches bonedigger-report, but only read_boot_status (how IMAGE_NAME/IMAGE_REF are sourced); this PR touches only route_issue_repo (how they are routed) — disjoint hunks, complementary. #1042 moves 00-entry.just into shared/ and does not touch changelog.just.

Refs #1044

---

Filed by architect agent (ACMM L5 — hold-gated mode). Hold-gated: human review required.

— hive: agent=architect backend=copilot model=claude-opus-5

[hanthor]

Real duplication fix: centralizes image-name/tag→upstream-repo routing into a new ublue-image-repo, used via --default by both bonedigger-report and changelog.just. Correctly identifies and fixes a dakota-nvidia drift bug (glob vs. exact-match) between the two original call sites. Structural test blocks re-inlining the grammar. CI test green; validate fails only on title-lint.

---

Generated by Claude Code