cgroup: move status reporting to cgroup.c and defer until after banner

security: reject unsafe container names and bind destinations

feat: add --user option to run commands as specific container users

app: enable daemon mode by default on fresh installs and update reboot instructions

app: terminal: fix scroll stall race condition during rapid log bursts

app: implement export container as tarball option

Merge branch 'ponces-main-ponces'

feat: fix colors in the active container card, implement background OS info refresh with pull-to-refresh support in RunningContainerCard

app: enforce JetBrains Mono across all terminal and monospace UI

container.c: reorder container startup sequence and move banner print before rootfs resolution

ui: complete localization and resource pruning