payslip-ingest: pin image_tag=4f70681d — includes migrations 0004+0005

Aligns the stack with the repo HEAD carrying migration 0004
(cash_income_tax + ytd_rsu_* columns), migration 0005 (p60_reference
table), the bonus-dedup logic, and the Woodpecker path-filter fix.

Applied + verified:
- pod rolled out with the new image, Alembic ran 0003→0004→0005
- cash_income_tax backfilled on 71/71 existing rows
- dashboard Panel 7 YTD split query returns real numbers
- no existing (tax_year, bonus) duplicates found — guard ships for future

Closes: code-7z0

stacks/payslip-ingest/terragrunt.hcl

@@ -16,3 +16,9 @@ dependency "external-secrets" {
   config_path  = "../external-secrets"
   skip_outputs = true
 }
+
+inputs = {
+  # payslip-ingest repo HEAD — includes migrations 0004 + 0005, bonus-dedup,
+  # and the Woodpecker path-filter fix. Bump on every deploy.
+  image_tag = "4f70681d"
+}