fc-devicemgmt: pin GX10 prune hotpatch image

apps/fc-devicemgmt/deployment-web.yaml

@@ -10,8 +10,9 @@
 # Phase 1 production uses a Longhorn RWO PVC at /data/devicemgmt.db. The
 # 1Password runtime item stays mounted through env for future MySQL/API-key
 # cutover, but MySQL is not required for this first product-host rollout.
-# Image v20260613-g2-66a43c1 is built from FlowerCore.DeviceManagement master
-# 66a43c1, carrying edge enrollment network completion and SQLite-safe trust-bundle smoke coverage.
+# Image v20260618-prune-18c7449-livebase is derived from the 2026-06-17 AN-13
+# live base with the Mac fleet SQLite snapshot-prune hotfix from
+# FlowerCore.DeviceManagement PR #49.
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
@@ -83,7 +84,7 @@ spec:
         fsGroupChangePolicy: OnRootMismatch
       containers:
         - name: web
-          image: localhost/fc-devicemgmt-web:v20260614-regroup-c5b8f82
+          image: localhost/fc-devicemgmt-web:v20260618-prune-18c7449-livebase
           imagePullPolicy: Never
           ports:
             - name: http