sepolicy.rule: prune redundant rules and add `ksu`` domain support

app: ui: show full-screen EmptyState when no containers are running in Control Panel

Revert "fix: chown host-side PTY slaves to AID_SHELL on Android"

build: accept native musl compiler in make native (#173)

app: reduced app size by 4MB by dropping bloated brutal busybox and compiling our own custom busybox for our needs

android: x11: replace unified tmpfs bridge with dedicated x11.c daemon manager

feat: integrate VirGL 3D hardware acceleration support on Android

x11/virgl: add --tx11-flags / --virgl-flags for custom server arguments

app: wired up "Termux:X11 Extra Flags" and "VirGL Extra Flags" to the container config screen

refactor: extract monitor logic into monitor.c

pulseAudio: fix SELinux denials on enforcing mode