Task spec edits provision a new template but leave the actor on its old image #353

Problem

Reconcile derives and provisions a new ActorTemplate when the task image changes. EnsureActor encounters AlreadyExists and returns the existing healthy actor without comparing or changing its template binding.

Reproduction

Reconcile a task with example/image:v1. Change its image to example/image:v2 and reconcile the same task again.

Observed behavior

The v2 template is provisioned and reconciliation returns success, but the actor remains bound to the v1 template.

Expected behavior

An accepted image edit should take effect through an explicit actor update/replacement policy, or be rejected as unsupported rather than silently ignored.

Executable regression test

TestReviewTaskEditUpdatesActorTemplate (includes fixture in the same file).

git clone --branch test/review-regressions https://github.com/fkautz/ax.git ax-review
cd ax-review
git checkout 1dc2613d29e12f306154a7e1183c1825a55d24ed
go test ./internal/controller -run '^TestReviewTaskEditUpdatesActorTemplate$' -count=1 -v

Requires the Go toolchain specified by go.mod. The test asserts the desired behavior and fails on the published revision. Production code is unchanged.

The regression uses the real reconciler and Substrate client with a stateful in-process gRPC fake that preserves actor identity and returns AlreadyExists on duplicate creation. It checks the actual template binding, not just template creation. No deployed Substrate cluster was used.