fix: lock compose project name to 'meezi', scope image prune to meezi only

Prevents runner workspace collisions with other projects (DrSousan etc.)
causing containers to be treated as orphans and stopped on deploy.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.gitea/workflows/ci-cd.yml

@@ -349,6 +349,12 @@ jobs:
         if: always()
         run: docker compose -f docker-compose.yml -f docker-compose.admin.yml ps
 
-      - name: Prune old images
+      - name: Prune old meezi images
         if: success()
-        run: docker image prune -f
+        # Only remove untagged (dangling) meezi images — never touches other projects
+        run: |
+          docker images --format '{{.Repository}}:{{.Tag}} {{.ID}}' \
+            | grep '^hostexecutor-' \
+            | grep '<none>' \
+            | awk '{print $2}' \
+            | xargs -r docker rmi || true

docker-compose.yml

@@ -1,3 +1,5 @@
+name: meezi   # Lock project name — prevents runner workspace from overriding it
+
 # Meezi — main stack (Postgres, Redis, API, Dashboard, Website, Koja)
 #
 # All images/packages served from Nexus at mirror.soroushasadi.com: