Fix OrbStack Docker Pull Core Rule Treat Docker Hub on OrbStack as a network path problem until proven otherwise. Do not assume the image is missing, private, or platform-incompatible before testing a small public image and the daemon's proxy path. Expected responses that are not failures: - returning is normal for the auth service root. - returning is normal for the registry root. - returning with is the expected unauthenticated registry response. Suspicious signals: - fails with . - or fails while explicit succeeds. - resolves to , which usually indicates Clash-style fake-ip/TUN routing. -…