C1(valkey-nix): point immich-ringtail and paperless at new valkey tags

- immich-ringtail: docker.io/valkey/valkey:8.1.6 →
  registry.ops.eblu.me/blumeops/valkey:v8.1.7-02859c5-nix
  (nix-built amd64 from containers/valkey/default.nix on ringtail's
  nix-container-builder).
- paperless: v8.1.6-r0-fabca04 → v8.1.7-02859c5 (Alpine arm64 from
  the updated container.py, valkey package bumped to 8.1.7-r0).

Both built by build-container workflow run #563.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

argocd/manifests/immich-ringtail/kustomization.yaml

@@ -21,8 +21,9 @@ images:
   - name: ghcr.io/immich-app/immich-machine-learning
     # CUDA variant of the same release — ringtail has an RTX 4080
     newTag: v2.6.3-cuda
-  # Using upstream multi-arch valkey image directly; the
+  # amd64 valkey built via nix on the ringtail nix-container-builder
-  # registry.ops.eblu.me/blumeops/valkey mirror is arm64-only (built
+  # (see containers/valkey/default.nix). The Alpine container.py build
-  # on indri) and would crashloop on ringtail.
+  # is arm64-only and serves paperless on indri.
   - name: docker.io/valkey/valkey
-    newTag: "8.1.6"
+    newName: registry.ops.eblu.me/blumeops/valkey
+    newTag: v8.1.7-02859c5-nix

argocd/manifests/paperless/kustomization.yaml

@@ -16,4 +16,4 @@ images:
     newTag: v2.20.13-07f52e9
   - name: docker.io/library/redis
     newName: registry.ops.eblu.me/blumeops/valkey
-    newTag: v8.1.6-r0-fabca04
+    newTag: v8.1.7-02859c5