feat: enable automatic container updates with dockcheck labels

- Configure dockcheck for automatic updates instead of check-only mode
- Add dockcheck update labels to Calibre and Changedetection services
- Enable OnlyLabel and AutoMode for targeted container management

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

roles/docker/templates/changedetection-compose.yml.j2

@@ -10,6 +10,7 @@ services:
         glance.url: https://{{ subdomains.watcher }}/
         glance.description: Changedetection
         glance.id: changedetection
+        mag37.dockcheck.update: true
       volumes:
         - changedetection-data:/datastore
 # Configurable proxy list support, see https://github.com/dgtlmoon/changedetection.io/wiki/Proxy-configuration#proxy-list-support
@@ -96,6 +97,7 @@ services:
         labels:
           glance.parent: changedetection
           glance.name: Browser
+          mag37.dockcheck.update: true
         image: dgtlmoon/sockpuppetbrowser:latest
         cap_add:
             - SYS_ADMIN