C1: service review — mealie (v3.12.0 deployed; upstream v3.17.0) (#351)

## Summary
- Recurring service review for `mealie`.
- Upstream is at **v3.17.0** (released 2026-05-06); deployed image is **v3.12.0** — 5 minor versions behind.
- Container is built locally from the forge mirror (`containers/mealie/Dockerfile`), so upgrade requires a fresh build + changelog review for breaking changes between v3.12 and v3.17.
- Deferring the actual upgrade to a separate task; this PR just refreshes `last-reviewed` and captures the gap in `notes`.

## Test plan
- [x] `prek` hooks pass
- [ ] Follow-up: open task to bump `containers/mealie/Dockerfile` `CONTAINER_APP_VERSION`, build, and update kustomization tag

## Notes
- No deployment changes in this PR.

Reviewed-on: #351

docs/changelog.d/service-review-mealie-2026-05-11.infra.md

@@ -0,0 +1 @@
+Reviewed `mealie` service version freshness; upstream is 5 minor versions ahead (v3.17.0 vs deployed v3.12.0). Marked reviewed; upgrade deferred.

service-versions.yaml

@@ -327,10 +327,14 @@ services:
 
   - name: mealie
     type: argocd
-    last-reviewed: 2026-03-16
+    last-reviewed: 2026-05-11
     current-version: "v3.12.0"
     upstream-source: https://github.com/mealie-recipes/mealie/releases
-    notes: Recipe manager; built from source via forge mirror
+    notes: >-
+      Recipe manager; built from source via forge mirror.
+      Upstream is at v3.17.0 as of 2026-05-11 (5 minor versions ahead).
+      Container/manifest still pinned to v3.12.0 — upgrade deferred to a
+      separate task (build new image, review changelog for breaking changes).
 
   - name: paperless
     type: argocd