release: 2.14.3: label-tag - a tag beside a label

No migration; schema 13. The pins (README, compose, guide), the guide's
backup example and the planned cuts.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

README.md

@@ -112,8 +112,8 @@ outbound mail will not reach the real internet without DNS, PTR, and port 25.
 > local image and pulls nothing:
 >
 > ```sh
-> docker build -f build/Dockerfile --build-arg VERSION=2.14.2 \
->   -t ghcr.io/mixeme/selfpost:2.14.2 .
+> docker build -f build/Dockerfile --build-arg VERSION=2.14.3 \
+>   -t ghcr.io/mixeme/selfpost:2.14.3 .
 > ```
 
 ```sh
@@ -122,7 +122,7 @@ docker run --rm -d --name selfpost-try \
   -e SELFPOST_HOSTNAME=mail.local.test \
   -e PANEL_COOKIE_SECURE=false \
   -v selfpost-try-data:/data \
-  ghcr.io/mixeme/selfpost:2.14.2
+  ghcr.io/mixeme/selfpost:2.14.3
 ```
 
 **Get the setup URL** (pick one):