Turnstone container-VM: podman image -> boco qcow2 boot

Arch image with turnstone (venv), dev toolkit, rootless podman; boots
via boco (virtiofs shares, direct UID mapping for nested virtiofs).
sshd ops channel + turnstone-server as guest marvin; state (SQLite db,
config, work) on host shares; LLM via the TensorX OpenAI-compatible
gateway (https://api.tensorx.ai/v1), reachable from the guest through
both slirp layers with no relay.

scripts/run.sh

@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+# Boot the turnstone VM (foreground; QEMU: ctrl-a x to quit).
+#
+# Web UI:   http://localhost:8080
+# Ops SSH:  ssh -i configs/ssh/id_ed25519 -p 2222 marvin@localhost
+set -euo pipefail
+cd "$(dirname "$0")/.."
+
+mkdir -p data work
+
+exec boco boot marvin-turnstone \
+  --memory "${VM_MEMORY:-4096M}" \
+  --mount-mode direct \
+  --forward "tcp:0.0.0.0:8080-:8080" \
+  --forward "tcp:0.0.0.0:2222-:22" \
+  --mount "$PWD/configs/turnstone:/home/marvin/.config/turnstone" \
+  --mount "$PWD/data:/var/lib/turnstone" \
+  --mount "$PWD/work:/home/marvin/work"