Implement the mandated Immich upgrade chain #6

Part of #611

1.107.2 to 1.132.3 to 1.133.x to 3.2.2. No straight jump. Two floors enforced in code: >=1.107.2 minimum source (we sit exactly on it by luck), and 1.137.0+ requires booting once on 1.132.0 to 1.136.0. Avoid 1.136.0 on this path.

Blocked by: A2.3

Phase: M2 Dec — Dogfood