app: Rootfs Repository: use unique, metadata-derived filenames for rootfs assets to prevent download conflicts

Update translation files (#157)

ui: polish rootfs repository sheet and fix cosmetic bugs

fix: post_extract_fixes: guard udev socket units with hardware access limit

docs: move language switcher to the top of README

feat: wire read-only bind mount flag to app

fix: distro icons disappearing after app kill

build: reduce R8 obfuscation to lower AV heuristic score

Add conditional compilation for ds_socketd_record_core_event

post_extract_fixes: generate and set machine-id to prevent systemd deadlocks on Fedora 44

seccomp: drop mknod/mknodat device blocking