Add Apps/Store tab, template WebUI/URL import, container RO volumes/device passthrough/run-as-user, and in-app confirm dialogs

Replaces every native confirm() with a shared P.confirm() modal (a hung
native dialog was found live to block the whole tab, including
auto-refresh, and once even double-confirmed an unrelated deletion).
Also fixes Edit Container silently resetting to Bridge/blanking the
Static IP for any container on a custom network, and a context menu
losing its anchor to a mid-read auto-refresh.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

webui/plugins/podman/Podman.page

@@ -70,7 +70,7 @@ function podman_asset_version(string $relPath): string
   <nav class="podman-subnav">
     <button class="active" data-panel="dashboard">Dashboard</button>
     <button data-panel="containers">Containers</button>
-    <button data-panel="templates">Templates</button>
+    <button data-panel="templates">Apps</button>
     <button data-panel="pods">Pods</button>
     <button data-panel="images">Images</button>
     <button data-panel="volumes">Volumes</button>
@@ -146,7 +146,7 @@ function podman_asset_version(string $relPath): string
       </div>
     </section>
 
-    <!-- ============================= TEMPLATES ============================= -->
+    <!-- ============================= APPS (Store + My Templates) ============================= -->
     <section class="podman-panel" id="podman-panel-templates"></section>
 
     <!-- ============================= PODS ============================= -->