Block a user
Inject universal /slim/init instead of requiring container-specific setup
refactor: split main.rs into registry, build, and qemu modules
fix: validate image name before building registry path
refactor: split main.rs into registry, build, and qemu modules
fix: validate image name before building registry path
fix: first 3 review findings (unshare reads, unmount cleanup, qemu exit status)