package.stop marks the package id, its live container names and its
member app ids as user-stopped. package.start and package.restart only
cleared the package id and the member app ids, so a container whose name
differs from its app id (podsteadr-app, immich_server) stayed marked after
a start: the start path saw it as wedged and force-recreated it, and the
reconcile guard and crash recovery would then leave it down after a crash,
an Archipelago restart or a reboot. Clear every name in the package's
container list too.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>