Add reproducible build system, native Unraid plugin, and WebUI

- versions.env pins podman, conmon, crun, netavark, aardvark-dns, passt,
  and fuse-overlayfs to verified upstream source checksums; SlackBuild
  recipes, scripts/build-packages.sh, checksums.sh, release.sh, and
  update-versions.sh implement the reproducible pipeline; GitHub Actions
  workflows build in a Slackware container and publish releases without
  committing any binaries.

- plugin/podman.plg installs/updates/removes all eight packages (the
  seven components plus the plugin's own unraid-podman scaffolding
  package) via upgradepkg, using the official Unraid array-event hook
  mechanism (event/disks_mounted, event/stopping) instead of editing
  /boot/config/go. rc.podman and the sbin/ helper scripts implement
  storage creation, config seeding/sync, preflight checks, autostart
  with per-container Safe-Mode, and package verify/update/rollback.

- webui/plugins/podman implements the Dashboard, Containers, Pods,
  Images, Volumes, Networks, Logs, Terminal, Compose, and Settings
  panels against the approved mockup (webui/mockups/prototype.html),
  talking to podman system service exclusively via PodmanClient.php
  (libpod REST API over the Unix socket), with two documented
  exceptions: Terminal's one-shot exec model and Compose's use of the
  podman compose CLI, since libpod has no REST equivalent for either.

- docs/ARCHITECTURE.md and docs/ROADMAP.md record the design decisions
  and honest current status (syntax-checked, unit- and
  integration-tested against fake sockets/servers; not yet run against
  a real Unraid/Podman/Slackware system).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

webui/plugins/podman/javascript/pods.js

@@ -0,0 +1,50 @@
+/**
+ * javascript/pods.js
+ *
+ * Pods panel: one card per pod with its member containers nested inside,
+ * backed by ajax/pods.php (which itself cross-references containers.php's
+ * data server-side — see that file for why).
+ */
+(function () {
+  'use strict';
+  const P = window.Podman;
+
+  function memberRow(m) {
+    return '' +
+      '<tr>' +
+      '<td>' + P.escapeHtml(m.name) + '</td>' +
+      '<td class="mono podman-row-sub">' + P.escapeHtml(m.image) + '</td>' +
+      '<td><span class="podman-chip ' + P.stateChipClass(m.state) + '"><span class="d"></span>' + P.escapeHtml(m.state) + '</span></td>' +
+      '</tr>';
+  }
+
+  function podCard(pod) {
+    const members = pod.members.length
+      ? pod.members.map(memberRow).join('')
+      : '<tr><td colspan="3" class="podman-empty-note">No member containers</td></tr>';
+
+    return '' +
+      '<div class="podman-pod-card">' +
+      '<div class="podman-pod-head">' +
+      '<span class="podman-chip ' + P.stateChipClass(pod.status) + '"><span class="d"></span>' + P.escapeHtml(pod.status) + '</span>' +
+      '<span class="name">' + P.escapeHtml(pod.name) + '</span>' +
+      '<span class="infra">' + pod.containersTotal + ' container(s)</span>' +
+      '</div>' +
+      '<div class="podman-table-wrap"><table><thead><tr><th>Container</th><th>Image</th><th>Status</th></tr></thead>' +
+      '<tbody>' + members + '</tbody></table></div>' +
+      '</div>';
+  }
+
+  function load() {
+    const container = P.el('podman-panel-pods');
+    return P.get('pods', 'list').then(function (pods) {
+      container.innerHTML = pods.length
+        ? pods.map(podCard).join('')
+        : '<div class="podman-card"><div class="podman-empty-note">No pods yet.</div></div>';
+    }).catch(function (err) {
+      container.innerHTML = '<div class="podman-card"><div class="podman-error">' + P.escapeHtml(err.message) + '</div></div>';
+    });
+  }
+
+  P.registerPanel('pods', { init: load, refresh: load });
+})();