Restarts any container that goes unhealthy, giving the 'healthcheck on every container' convention teeth (previously only mediapvr had autoheal, and in opt-in label mode = inert). Raw docker.sock RW (restart needs POST; can't use the read-only socket-proxy). Sweep 2b. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>