Add --remove-orphans to the deploy step (#368)

docker compose up -d alone leaves containers running for services that
were removed from docker-compose.yml -- it only affects services still
defined in the file. This is exactly what happened when #367 dropped
the pypi/netmon services: their containers kept running untouched
(netmon crash-looping) until a reboot surfaced it, at which point they
just came back via each container's own restart policy. --remove-orphans
makes 'docker compose up -d' actually reconcile to match the file.

Author: alexreinking

.github/workflows/validations.yml

@@ -109,4 +109,4 @@ jobs:
             if git diff --name-only "$BEFORE" "$AFTER" | grep -qE '^(master/|master\.sh|pyproject\.toml|uv\.lock)'; then
               BUILD_FLAG="--build"
             fi
-            docker compose up -d $BUILD_FLAG
+            docker compose up -d --remove-orphans $BUILD_FLAG