feat: thothctl workspace preprocessing CLI and file-ingress contracts (P2)

tools/thothctl/internal/pi/update.go

@@ -743,7 +743,12 @@ func writeLifecycleOverride(path, image string) error {
 	if err != nil {
 		return errors.New("lifecycle image override could not be encoded")
 	}
-	contents := []byte("services:\n  core:\n    image: " + string(quoted) + "\n")
+	contents := []byte(`services:
+  core:
+    image: ` + string(quoted) + `
+  workspace-maintenance:
+    image: ` + string(quoted) + `
+`)
 	if err := writeFileDurably(path, ".pi-lifecycle-", contents); err != nil {
 		return errors.New("lifecycle image override could not be written durably")
 	}