weekly-update-check - read-only version report for an Ansible/K3s homelab

check.py  compares the pins in versions.yml (www_k3s repository) with Docker Hub and GitHub,
          detects same-tag rebuilds (linux/amd64 image id vs. the image on each host via crictl),
          reads PHP in the pods and counts pending dnf packages per host. Changes nothing.
run.sh    runs check.py and mails the report (crontab example inside).

Setup: clone github.com/aptupgrademe/www_k3s to ~/www_k3s, set HOSTS in check.py,
key-based SSH as root to each host, python3 with PyYAML, a working "mail" command.
