Document why host-label builds leave orphan images on the Docker host and the post-push cleanup + one-time prune pattern. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>