Add Apps/Store tab, template WebUI/URL import, container RO volumes/device passthrough/run-as-user, and in-app confirm dialogs

Replaces every native confirm() with a shared P.confirm() modal (a hung
native dialog was found live to block the whole tab, including
auto-refresh, and once even double-confirmed an unrelated deletion).
Also fixes Edit Container silently resetting to Bridge/blanking the
Static IP for any container on a custom network, and a context menu
losing its anchor to a mid-read auto-refresh.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

webui/plugins/podman/javascript/pods.js

@@ -190,8 +190,9 @@
       label: 'Remove',
       danger: true,
       onClick: function () {
-        if (!confirm('Remove pod "' + pod.name + '" and all its member containers?')) return;
-        handleAction(pod.name, 'remove', { force: true });
+        P.confirm('Remove pod "' + pod.name + '" and all its member containers?', { danger: true, confirmLabel: 'Remove' }).then(function (ok) {
+          if (ok) handleAction(pod.name, 'remove', { force: true });
+        });
       },
     });
     P.openContextMenu(btn, items);