Exclude unupdatable containers from Watchtower

- dns-updateip: local image not on any registry
- immich redis/postgres: pinned by digest, no floating tag

immich/docker-compose.yaml

@@ -53,6 +53,8 @@ services:
   redis:
     container_name: immich_redis
     image: docker.io/redis:6.2-alpine@sha256:148bb5411c184abd288d9aaed139c98123eeb8824c5d3fce03cf721db58066d8
+    labels:
+      - com.centurylinklabs.watchtower.enable=false
     healthcheck:
       test: redis-cli ping || exit 1
     restart: always
@@ -60,6 +62,8 @@ services:
   database:
     container_name: immich_postgres
     image: docker.io/tensorchord/pgvecto-rs:pg14-v0.2.0@sha256:739cdd626151ff1f796dc95a6591b55a714f341c737e27f045019ceabf8e8c52
+    labels:
+      - com.centurylinklabs.watchtower.enable=false
     environment:
       POSTGRES_PASSWORD: ${DB_PASSWORD}
       POSTGRES_USER: ${DB_USERNAME}