fix: attach enter/run beside init.scope, not inside it

docs: document resource limits

fix: name a gateway client's cable after the container, not its PID

app: fix: stop the card below sliding under an expanding container card

app: move Resource Limits after Integration & Hardware

fix: report CPU use under a limit on kernels before 4.15

app: show the hostname on the container card without its label

refactor: group the optional checks by what they are for

docs: explain a limit that is missing despite its kernel option

docs: CPU and process limits on GKI need every module rebuilt