Three additions from pre-merge review:
1. .pkgnew config merge — pkgbase drops updated configs as /etc/*.pkgnew.
Find and merge them before rebooting so the 15.1 system boots with its
own configs, not 15.0-era ones.
2. Service health check — post-reboot verification now includes explicit
checks: colibri_daemon, postgresql, tailscaled, bastille jails, pfctl.
Version numbers matching is not enough — services must be running.
3. pkg autoremove — clean up orphaned packages the upgrade leaves behind.
Dry-run first, then remove.
Sam & Claude
09632c16e7