Fix 9 bugs found by dev-container test suite; harden test harness
- ssh.socket: preserve address families when rewriting ListenStream (Ubuntu 24.04 dual entries -> EADDRINUSE)
- ufw: declare ufw-docker-logging-deny chain in after.rules (iptables-restore failed at line 47)
- caddy: seed Caddyfile with comment + :80 health block (empty file -> adaptation EOF crash-loop)
- mariadb: wait for authenticated SELECT 1 instead of ping (first-boot race, ERROR 1045)
- create: CREATE USER host '\%' -> '%' (ERROR 1133, site provisioning never worked)
- wp-cli: pass WORDPRESS_DB_* and WORDPRESS_CONFIG_EXTRA env (getenv_docker fallbacks)
- wp-cli: add missing 'wp' prefix to all four invocations (exit 127)
- compose: escape \ as \$\ so interpolation keeps PHP intact
- devcontainer: ship daemon.json (overlay2) and document docker-storage volume for nested dockerd
- smoke.sh: retry windows, no false-pass curl checks, credentialed DB check, full-env wp checks
- README: podman workflow, troubleshooting, bugs-caught section
Mike Kell
1a999c7548