fix: cancel terminal session notification upon service termination or empty session state

app: Rootfs Repository: contextual empty state and hide banner while searching

seccomp: truly skip all filters when noseccomp is active

app: Rootfs Repository: use unique, metadata-derived filenames for rootfs assets to prevent download conflicts

Update translation files (#157)

ui: polish rootfs repository sheet and fix cosmetic bugs

fix: post_extract_fixes: guard udev socket units with hardware access limit

docs: move language switcher to the top of README

feat: wire read-only bind mount flag to app

fix: distro icons disappearing after app kill

build: reduce R8 obfuscation to lower AV heuristic score