Add reproducible build system, native Unraid plugin, and WebUI

- versions.env pins podman, conmon, crun, netavark, aardvark-dns, passt,
  and fuse-overlayfs to verified upstream source checksums; SlackBuild
  recipes, scripts/build-packages.sh, checksums.sh, release.sh, and
  update-versions.sh implement the reproducible pipeline; GitHub Actions
  workflows build in a Slackware container and publish releases without
  committing any binaries.

- plugin/podman.plg installs/updates/removes all eight packages (the
  seven components plus the plugin's own unraid-podman scaffolding
  package) via upgradepkg, using the official Unraid array-event hook
  mechanism (event/disks_mounted, event/stopping) instead of editing
  /boot/config/go. rc.podman and the sbin/ helper scripts implement
  storage creation, config seeding/sync, preflight checks, autostart
  with per-container Safe-Mode, and package verify/update/rollback.

- webui/plugins/podman implements the Dashboard, Containers, Pods,
  Images, Volumes, Networks, Logs, Terminal, Compose, and Settings
  panels against the approved mockup (webui/mockups/prototype.html),
  talking to podman system service exclusively via PodmanClient.php
  (libpod REST API over the Unix socket), with two documented
  exceptions: Terminal's one-shot exec model and Compose's use of the
  podman compose CLI, since libpod has no REST equivalent for either.

- docs/ARCHITECTURE.md and docs/ROADMAP.md record the design decisions
  and honest current status (syntax-checked, unit- and
  integration-tested against fake sockets/servers; not yet run against
  a real Unraid/Podman/Slackware system).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

webui/plugins/podman/javascript/networks.js

@@ -0,0 +1,72 @@
+/**
+ * javascript/networks.js
+ *
+ * Networks panel: table + create/remove, backed by ajax/networks.php.
+ */
+(function () {
+  'use strict';
+  const P = window.Podman;
+  let networks = [];
+
+  function rowHtml(n) {
+    const nameCell = n.isDefault
+      ? '<strong>' + P.escapeHtml(n.name) + '</strong> <span class="podman-row-sub">(default)</span>'
+      : P.escapeHtml(n.name);
+    const removeDisabled = n.isDefault || n.containers > 0;
+    return '' +
+      '<tr data-name="' + P.escapeHtml(n.name) + '">' +
+      '<td>' + nameCell + '</td>' +
+      '<td><span class="podman-chip podman-chip-neutral">' + P.escapeHtml(n.driver) + '</span></td>' +
+      '<td class="mono">' + P.escapeHtml(n.subnet || '&mdash;') + '</td>' +
+      '<td class="mono">' + P.escapeHtml(n.gateway || '&mdash;') + '</td>' +
+      '<td class="tnum">' + n.containers + '</td>' +
+      '<td class="podman-actions"><button class="podman-btn podman-btn-icon" data-action="remove"' +
+      (removeDisabled ? ' disabled' : '') + ' title="Remove">&#128465;</button></td>' +
+      '</tr>';
+  }
+
+  function render() {
+    const tbody = P.el('networks-tbody');
+    tbody.innerHTML = networks.length
+      ? networks.map(rowHtml).join('')
+      : '<tr><td colspan="6" class="podman-empty-note">No networks.</td></tr>';
+  }
+
+  function load() {
+    const tbody = P.el('networks-tbody');
+    tbody.innerHTML = P.loadingRow(6);
+    return P.get('networks', 'list').then(function (data) {
+      networks = data;
+      render();
+    }).catch(function (err) {
+      tbody.innerHTML = P.errorRow(6, err.message);
+    });
+  }
+
+  function init() {
+    P.el('networks-create-btn').addEventListener('click', function () {
+      const name = prompt('New network name:');
+      if (!name) return;
+      const subnet = prompt('Subnet (optional, e.g. 10.89.2.0/24):') || undefined;
+      P.post('networks', 'create', { name: name, driver: 'bridge', subnet: subnet }).then(load).catch(function (err) {
+        alert('Create failed: ' + err.message);
+      });
+    });
+
+    P.el('networks-tbody').addEventListener('click', function (e) {
+      const btn = e.target.closest('button[data-action="remove"]');
+      if (!btn || btn.disabled) return;
+      const name = btn.closest('tr').dataset.name;
+      if (!confirm('Remove network "' + name + '"?')) return;
+      btn.disabled = true;
+      P.post('networks', 'remove', { name: name }).then(load).catch(function (err) {
+        alert('Remove failed: ' + err.message);
+        btn.disabled = false;
+      });
+    });
+
+    return load();
+  }
+
+  P.registerPanel('networks', { init: init, refresh: load });
+})();