post_extract_fixes: restrict dhcpcd to NAT mode and whitelist eth interfaces to prevent Android network interference

fix: prevent Linux /dev breakage by restricting device pruning to Android environments

fix: cancel terminal session notification upon service termination or empty session state

app: Rootfs Repository: contextual empty state and hide banner while searching

seccomp: truly skip all filters when noseccomp is active

app: Rootfs Repository: use unique, metadata-derived filenames for rootfs assets to prevent download conflicts

Update translation files (#157)

ui: polish rootfs repository sheet and fix cosmetic bugs

fix: post_extract_fixes: guard udev socket units with hardware access limit

docs: move language switcher to the top of README

feat: wire read-only bind mount flag to app