lagport v0.1.0

* devtools 35d8710 -> 41bd389: created networks take dind's MTU from the daemon (6f8aff9)
* suites: every network they create takes dind's MTU (bbd61f9)
* cluster test: a served node's store waited out before the next start (51a409f)
* long-link test: a copy that ended without landing is scanned again (c46b990)
* expiry tests: a peer's liveness judged at a frozen moment, not a race (75bd92c)
* cross-node test: the lying-holder fetch waited for by its own count (f17b204)
* copy test: every kind of failure judged on tokio's paused clock too (0c3e4bf)
* copy test: a slow commit judged on tokio's paused clock (4d0d317)
* nightly: pins moved, nothing to release (9afc39b)
* kernel-matrix: init's verdict and end go through the kernel's log (b41d885)
* expiry test: GC waits for both of the image's blobs, config too (172649e)
* fuzz: Cargo.lock in step with the crate, and lock-check refuses one out of step (a353d99)
* test-fuzz: the lock backstop compares with the lock as the run found it (58210ce)
* membership tests: an image is everywhere once no copy still runs (8d47814)
* kernel-matrix: init closes the console before the power goes (d7f6beb)
* release-test: each container bounded, naming the step a stall stopped at (0aa60a4)
* fuzz: keep the night's second peer_upload crasher, crash-df399eac (764de09)
* DESIGN-NOTES: what nextest broke, its CI numbers, devtools' answer (1d1c70e)
* devtools: 65eb3a7 -> 35d8710, trivy's distribution count leaves formulation out (d5dfd94)
* fuzz: only a PATCH disagreeing with the file may fail a peer upload (b713343)
* ci: scan_scout installs git to apply the night's candidate (ce02426)
* binary tests: nodes' ports from below the ephemeral range; logs on a failed join (e37bea5)
* fetch_memory: each client pulls on its own thread, off the nodes' runtime (9b809f7)
* fetch: time the suspect hold on tokio's clock; the test pauses past it (991161a)
* broadcast: reserve queue bytes with try_update, not fetch_update (aac1819)
* fuzz: a failed upload answers every PATCH as failed, in the oracle too (d48111d)
* ci: the test job installs cargo-nextest's pinned release file (c19b3a3)
* sandbox: remove --strict; the sandbox never stops a node (f3dfb2b)
* smoke: ignore docker's empty runtime mount points in the exported files (5d2081a)
* e2e: make each proxy's tls mount point inside its config volume (1d06d6c)
* ci: kernel_matrix extracts the kernel packages with GNU tar (b41e860)
* test: run the suite under cargo-nextest (5109865)
* devtools: follow 65eb3a7; image pins are devtools', pulls bounded (f9ced3e)
* tests: apply the real Landlock ruleset on any kernel, claimed (ac0255c)
* tests: the expiry hold test hears both peers before each live run (b8ce8f6)
* tests: fetch_memory pulls 128 MiB under a 96 MiB bound (80d78e1)
* fuzz: narrow the peer_upload oracle; keep each target's log (da6bfe4)
* native check: read the kernel's architecture from its symbols when the sysctl is missing (df45e2f)
* release-test: copy majors-refused.sh in, and say each step as it begins (2091681)
* devtools: follow bb33a2b; reports never gate, its Rust tools in use (3b36952)
* build-check: read the Makefile's values from stdout alone (08bbbfe)
* have: a have-query its connection failed is asked once more (cb1f98f)
* peer: a 16 MiB stream window, as large as the connection's (6cceb89)
* tests: the repair-panic test waits for the second scan to end (8e0de2d)
* sync: a merge's winning pulls are stored by Meta::import (9cfa680)
* Allow claude to write to .git in this repo (6a4a420)
* tests: two load flakes judged by what cannot move under them (3512769)
* devtools: move to 691b6fa and follow it (258f824)
* CLAUDE.md: drop "nothing is committed from inside the sandbox" (0f6a7ed)
* Claude sandbox (ebb2161)
* soak: small layers and shared ones, to fit a shared CI runner (4b585e0)
* devtools: move to 94847f3; verify needs the versions and lock_check gates (10c8d74)
* lagport: a small clustered OCI registry (92efa72)