- Config permissions tightened to 0600 with tori:tori ownership (v0.3.0
security hardening)
- Added post_upgrade hook to fix config ownership and permissions for
existing users
- Changed sysusers shell from /bin/bash to /usr/bin/nologin
- Added docker group hint to post_install message
- Improved post_remove with actual cleanup commands