system_gc
Reclaims orphan nerdit-app images with no live workload, verifying each before removal. Use dry-run to preview what would be deleted without changing anything.
Instructions
Garbage-collect orphan app images (admin-scoped, audited).
Reclaims ``nerdit-app/*`` image repos with no live workload row, verified
by re-listing so an in-use tag is reported skipped, never removed.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| dry_run | No | true = enumerate what would be reclaimed and remove nothing; false (the default) actually removes. | |
| idempotency_key | No | Caller-chosen key: a retry with the same key replays the first result instead of running a second gc. Omit and a real run mints a fresh key per call, so each call acts; a dry run mints none and needs none. | |
| include_orphan_data | No | true also deletes service data directories with no live workload row — IRREVERSIBLE. false (the default) reclaims orphan images only. |