refactor: remove redundant systemd-resolved DNSStubListener configuration and related documentation

mount: ensure critical device nodes are always recreated

fix(ui): reduce GPU overdraw - surface colors and Scaffold backgrounds

fix(ui): replace custom FAB with ExtendedFloatingActionButton

Update translation files (#93)

fix: remove explicit size limit from tmpfs mount options in hardware.c

fix: add net subsystem match to udevadm trigger in post_extract_fixes.sh

security: restrict daemon access to root and 'droidspaces' group (#98)

refactor(info): modernize container diagnostic reporting across CLI and Android app, implement --format flag for 'info' command

security: implement automated SELinux permissive reversion

Implement hardening checks for user namespaces (#101)