Changed how all docker images have their version set to use the compose repo

terraform.tfvars

@@ -203,14 +203,10 @@ nodes = {
         vmid             = 210
         ip               = "192.168.7.60"
         vlan             = 7
-        memory           = 4096
+        memory           = 6144
         cores            = 4
         disk_size        = 32
         qemu_guest_agent = false
-        # Rendered with templatefile(): ${gitea_runner_token} comes from
-        # Infisical (GITEA_RUNNER_TOKEN in secrets.tmpl), so the token is
-        # never committed. Also runs n8n on :5678 (N8N_* secrets, Postgres
-        # on argo); see the prerequisites in the Butane file.
         butane_file = "butane/oswald_runner.yaml.tftpl"
       }
       "ai" = {
@@ -218,16 +214,12 @@ nodes = {
         vmid             = 211
         ip               = "192.168.7.61"
         vlan             = 7
-        memory           = 4096
-        cores            = 2
+        memory           = 8192
+        cores            = 4
         disk_size        = 32
         qemu_guest_agent = false
-        # OPENCODE_SERVER_PASSWORD in Infisical; see butane/ai.yaml.tftpl.
-        butane_file      = "butane/ai.yaml.tftpl"
+        butane_file = "butane/ai.yaml.tftpl"
       }
-      # Headscale subnet router / exit node. Registers as an ephemeral node,
-      # so the preauth key must be --ephemeral --reusable; the routes and the
-      # exit node still need approving on the headscale side once it appears.
       "oswl-connector" = {
         hostname         = "oswl-connector"
         vmid             = 212
@@ -239,33 +231,17 @@ nodes = {
         qemu_guest_agent = false
         butane_file      = "butane/oswl_connector.yaml.tftpl"
       }
-      # Dozzle log viewer hub. Pulls container logs from the dozzle agents on
-      # the other Flatcar VMs (port 7007) plus its own local docker socket.
-      # Keeps no state on disk, so it is safe to rebuild at any time.
       "monitor" = {
         hostname         = "monitor"
         vmid             = 213
         ip               = "192.168.7.63"
         vlan             = 7
-        memory           = 2048
+        memory           = 4096
         cores            = 2
         disk_size        = 32
         qemu_guest_agent = false
         butane_file      = "butane/monitor.yaml.tftpl"
       }
-      # CISA Known Exploited Vulnerabilities catalog as an RSS feed.
-      # Stateless container; feed at :3000/rss.
-      "cisa-kev-rss" = {
-        hostname         = "cisa-kev-rss"
-        vmid             = 214
-        ip               = "192.168.7.64"
-        vlan             = 7
-        memory           = 1024
-        cores            = 1
-        disk_size        = 16
-        qemu_guest_agent = false
-        butane_file      = "butane/cisa_kev_rss.yaml"
-      }
     }
     machines = {
       "grist" = {
@@ -280,7 +256,7 @@ nodes = {
         agent      = 1
         memory     = 4096
         disk_size  = "32"
-        balloon    = 1
+        balloon    = 1024
         cpu_type   = "kvm64"
         cores      = 4
         sockets    = 1