standardize upstream version-check comments; bump pinned versions

Reword the lookup comment above each upstream _version var to a single
greppable "# version-check: <url>" marker, always placed directly above
the version line, so a script can find every instance with one grep.

Bump bin 2.0.1 -> 2.0.2, pleroma 2.10.0 -> 2.11.0, relayer 2.2.8 -> 2.3.1,
ergo 2.18.0 -> 2.19.1, openhop_repeater 1.1.1 -> 1.1.4, keeping the
bin/server and pleroma/otp duplicate version vars in sync.

Add a TODO on openhop/repeater to review upstream's identity-validation
changes (1.1.2-1.1.4) against the stale-UID bug before deploying to the
live mesh node.

Document the version-check convention in the README.

1 files changed, 17 insertions, 0 deletions

diff --git a/README.md b/README.md
index 72fd055..86189fd 100644
--- a/README.md
+++ b/README.md
@@ -43,3 +43,20 @@ pleroma_db_passwd: "pleDbPass123"
 pleroma_db_superpass: "dbpass123"
 pleroma_secret_key: "secret123"
 ```
+
+## Dependency Version Checks
+
+Roles that pin an upstream dependency's version carry a comment directly above the `_version`
+variable in `defaults/main.yaml`, pointing at the page where the current upstream version can be
+confirmed:
+
+```yaml
+# version-check: https://github.com/fiatjaf/relayer/releases
+relayer_version: "2.3.1"
+```
+
+Find every instance across the repo with:
+
+```sh
+grep -rn "# version-check:" --include="*.yaml" .
+```