/openspec/changes/archive/2026-09-24-switch-docker-rootful/specs/container-runtime/