The felis-paper/felis-limbo jars are baked into the lobby/limbo images; with the images hosted in the in-cluster registry, the extra step is pushing the rebuilt image there (which is also what survives an image GC), not a bare containerd import. The installer re-run does both.