Package rootless Docker support

[acrogenesis]

Rootless Docker needs Moby's rootless launcher and setup tool plus package-owned service defaults that cannot resolve daemon helpers through user-writable paths. This packages that runtime and supplies the companion Omarchy change with its rootless environment generator while keeping the separate Windows daemon root-only.

The docker-rootless-extras recipe now installs both dockerd-rootless.sh and dockerd-rootless-setuptool.sh. Its generated user service uses PATH=/usr/bin and XDG_CONFIG_HOME=%h/.config, preventing long-lived dockerd and RootlessKit helper resolution through mutable session paths. The Omarchy-specific changes live in .omarchy/patches/rootless-service-boundary.patch, so upstream refreshes reapply the boundary instead of silently dropping it; the downstream package release is 29.8.0-1.1.

Both stable and development settings recipes conditionally install the rootless Docker environment generator and rootful socket drop-in when the selected Omarchy source contains them. That keeps builds against the currently pinned stable source compatible until it advances.

Companion Omarchy PR: omacom/omarchy#11386

Validation

• makepkg --verifysource --skippgpcheck
• isolated makepkg -f --noconfirm build of docker-rootless-extras 29.8.0-1.1
• package-worktree reproduction matches the patched source tree
• archive payload and generated docker.service inspection
• Bash syntax and whitespace checks
• clean merge-tree against current master
• real package installation and rootless runtime/migration validation in Omarchy Lab
• repeated independent Codex review; final round reported no valid actionable findings

Screenshot