Align Docker defaults with v6.0.4-rc.1

Pin Docker install defaults and Helm metadata to the support prerelease version.

scripts/install-docker.sh

@@ -6,7 +6,7 @@ set -euo pipefail
 
 SCRIPT_DIR="$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)"
 DOCKER_IMAGE_REPO="${DOCKER_IMAGE_REPO:-rcourtman/pulse}"
-CANONICAL_DEFAULT_PULSE_VERSION="6.0.3"
+CANONICAL_DEFAULT_PULSE_VERSION="6.0.4-rc.1"
 
 resolve_default_pulse_version() {
     if [ -n "${PULSE_IMAGE_VERSION:-}" ]; then

scripts/installtests/build_release_assets_test.go

@@ -107,6 +107,10 @@ func TestBuildReleaseUsesV6InstallScripts(t *testing.T) {
 	}
 }
 
+func shieldsBadgeMessage(value string) string {
+	return strings.ReplaceAll(value, "-", "--")
+}
+
 func TestCreateReleaseUploadsPowerShellInstaller(t *testing.T) {
 	content, err := os.ReadFile(repoFile(".github", "workflows", "create-release.yml"))
 	if err != nil {
@@ -736,9 +740,10 @@ func TestDeploymentDefaultsPinVersionedImagesAndHelmDocsChecksum(t *testing.T) {
 		t.Fatalf("read Helm README.md: %v", err)
 	}
 	chartReadme := string(chartReadmeBytes)
+	badgeVersion := shieldsBadgeMessage(version)
 	chartReadmeRequired := []string{
-		"![Version: " + version + "](https://img.shields.io/badge/Version-" + version + "-informational?style=flat-square)",
-		"![AppVersion: " + version + "](https://img.shields.io/badge/AppVersion-" + version + "-informational?style=flat-square)",
+		"![Version: " + version + "](https://img.shields.io/badge/Version-" + badgeVersion + "-informational?style=flat-square)",
+		"![AppVersion: " + version + "](https://img.shields.io/badge/AppVersion-" + badgeVersion + "-informational?style=flat-square)",
 	}
 	for _, needle := range chartReadmeRequired {
 		if !strings.Contains(chartReadme, needle) {

scripts/installtests/install_docker_sh_test.go

@@ -42,6 +42,17 @@ func previousStablePatchVersion(version string) (string, bool) {
 	return fmt.Sprintf("%s.%s.%d", parts[0], parts[1], patch-1), true
 }
 
+func previousStableForPrereleaseVersion(version string) (string, bool) {
+	if !isPrereleaseVersion(version) {
+		return "", false
+	}
+	base, _, ok := strings.Cut(version, "-")
+	if !ok {
+		return "", false
+	}
+	return previousStablePatchVersion(base)
+}
+
 func TestInstallDockerScriptUsesConfiguredImageRepoDefault(t *testing.T) {
 	workDir := t.TempDir()
 	version := currentReleaseVersion(t)
@@ -172,6 +183,23 @@ func TestInstallDockerProofTracksStablePatchReleaseContract(t *testing.T) {
 	)
 }
 
+func TestInstallDockerProofTracksSupportPrereleaseContract(t *testing.T) {
+	version := currentReleaseVersion(t)
+	if !isPrereleaseVersion(version) {
+		t.Skip("current release is stable")
+	}
+	previous, ok := previousStableForPrereleaseVersion(version)
+	if !ok {
+		t.Skip("current prerelease does not have a previous stable patch")
+	}
+
+	assertFileContainsAllNormalized(t, repoFile("docs", "release-control", "v6", "internal", "subsystems", "deployment-installability.md"),
+		"The active support prerelease `v"+version+"` cut sets the repo-root `VERSION`, repo-root `docker-compose.yml` image default, `scripts/install-docker.sh` fallback, and Helm chart release metadata to the same `"+version+"` release version.",
+		"This support prerelease uses the private Pro support image path with a stable rollback reference `v"+previous+"`, no `latest` movement, no stable semver tag movement, no R2 manifest promotion, no broker download metadata promotion, and no public `rcourtman/pulse` image publication.",
+		"For the active support prerelease `v"+version+"` cut, the repo-root compose default and `scripts/install-docker.sh` fallback must both pin `"+version+"` until the next governed stable cut moves them forward.",
+	)
+}
+
 func runInstallDockerScript(t *testing.T, workDir string, envVars ...string) {
 	t.Helper()