cardinal 1.60 — backup restore and cross-machine transfers

Restore backups into new containers, migrate between hosts, and a stack of runtime fixes.

1.60 is a rapid series of patches that adds real backup restore:

  • backup restore --rebind — restore a verified archive into a freshly

created container, enabling cross-machine transfers.

  • backup remove — remove an archive and its checksum sidecar safely.
  • Restore safety — whiteouts, devices, fifos, and sockets are skipped

rather than aborting the restore.

Under the hood there's a broad runtime pass: zombie init processes are ignored,

veth moves retry during namespace races, /proc-based init resolution fixes

startup on some kernels, and image env vars now reach startup scripts.

This series also lays the groundwork for CARDINAL Desktop integration —

inspection, mount metadata, and file uploads over scoped SFTP.