app: show the hostname on the container card without its label

refactor: group the optional checks by what they are for

docs: explain a limit that is missing despite its kernel option

docs: CPU and process limits on GKI need every module rebuilt

Translated using Weblate (Indonesian) (#342)

Add Anland Guide (#230)

fix: report IPv6 NAT support truthfully and fail closed without MASQUERADE

post_extract_fixes: stop OpenWrt from locking apps out of the host's debugfs

net: stop leaking duplicate policy rules on kernels before 4.12

daemon: forward client stdin to run with --stdin

docs: document --x11 and the enable_x11 key