fix: bug in workflows job lookup + improve dependency deploys

[jonmorehouse]

Fixes a long-standing bug where some workflows could fail with a "deploy not found" error. The GetInstallDeployForApplyStep query used ComponentID in a GORM struct-based Where clause, but ComponentID on InstallDeploy is gorm:"-" — so GORM silently dropped the filter. The actual query only matched on install_workflow_id, returning the most recent deploy in the workflow regardless of component. When image dependency syncs created a newer deploy in the same workflow, the apply step would pick up the wrong one.

Fixed by joining through install_components to filter on the real component_id column.

Additionally, deploying upstream image dependencies is now opt-in. Previously, a manual deploy would always sync any images the component depends on. Now you must explicitly pass --dependency-images on the CLI (or check "Sync dependency images" in the dashboard) to include those sync steps.

[github-actions]

This PR was marked as stale, and will be closed after 3 more days. Add the #keep-open label to prevent this from being closed.