Fix container updates: rebuild on new image, consolidate update scripts

Weekly sync window was pulling images but using docker start after rsync,
which ignores the new digest. Containers in the emby/critical-data profiles
(Emby, Mariadb, Redis) never actually landed on updated images.

docker_update_remaining.sh merged into docker_update.sh --remainder, which
already had better exclusion logic. Added WEEKLY_REMAINING_UPDATES toggle
and WEEKLY_RESTART_CONTAINERS exclusion to remainder mode.

Onboard now runs docker_network_connect.sh on mirror before deploying stacks.

Partnership/partnership_onboard.sh

@@ -358,6 +358,7 @@ log "Mirror: $MIRROR ($MIRROR_IP)"
 echo ""
 
 STEP_SSH_OK=false
+STEP_NETWORK_OK=false
 STEP_STOP_AUTH_OK=true
 STEP_AUTH_OK=true
 AUTH_DEPLOYED=0
@@ -501,6 +502,25 @@ if [[ "$PHASE1_ONLY" == true ]]; then
     exit 0
 fi
 
+# ── Step 1b: Ensure custom Docker network exists on mirror ────────────────────────────────────
+# Must run before any container deploy — docker create fails if the network is missing.
+echo ""
+echo "━━━ Step 1b — Docker Network (Mirror) ━━━"
+
+_net_script="${SCRIPTS_ROOT}/Docker_Essentials/docker_network_connect.sh"
+if [[ "$DRY_RUN" == true ]]; then
+    warn "DRY RUN — would run docker_network_connect.sh on $MIRROR"
+    STEP_NETWORK_OK=true
+elif timeout 60 ssh -i "$MIRROR_SSH_KEY" \
+        -o ConnectTimeout="$SSH_TIMEOUT" -o BatchMode=yes root@"$MIRROR_IP" \
+        "bash '$_net_script'" 2>/dev/null; then
+    log "Docker network ready on $MIRROR ✅"
+    STEP_NETWORK_OK=true
+else
+    warn "docker_network_connect.sh failed on $MIRROR — containers may fail if network is missing"
+    warn "Check ${_net_script} on $MIRROR and re-run with --skip-ssh if needed"
+fi
+
 # ── Step 2: Stop mirror's existing auth stack ─────────────────────────────────────────────────
 echo ""
 echo "━━━ Step 2 — Stop Mirror Auth Stack ━━━"
@@ -653,6 +673,7 @@ _ok()   { [[ "$1" == true ]] && echo "✅" || echo "❌"; }
 _skip() { [[ "$1" == true ]] && echo "skipped" || echo "$(_ok "$2")"; }
 
 echo "  Step 1  — SSH keys:         $(_skip "$SKIP_SSH"             "$STEP_SSH_OK")"
+echo "  Step 1b — Docker network:   $(_ok "$STEP_NETWORK_OK")"
 echo "  Step 2  — Stop auth:        $(_skip "$SKIP_AUTH_STACK"       "$STEP_STOP_AUTH_OK")"
 echo "  Step 3  — Auth stack:       $( [[ "$SKIP_AUTH_STACK" == true ]] && echo "skipped" || echo "${AUTH_DEPLOYED} deployed, ${AUTH_FAILED} failed" )"
 echo "  Step 4  — Stop arr:         $(_skip "$SKIP_ARR_STACK"        "$STEP_STOP_ARR_OK")"