feat(runner): Container detection and handling, video bit-depth flags and script updates (#303)

## Description

Works in apptainer now.. podman is still the goat since apptainer needs
docker treatment and even more..

- Added container detection so podman can be used to it's fullest, the
non-sane ones are handled separately..
- Added video bit-depth option, cuz AV1 and 10-bit encoding go well
together.
- Some other package updates to nestri-server.
- General tidying up of scripts to make multi-container-engine handling
less of a pain.
- Updated old wireplumber lua script to new json format.

Further changes:

- Removed unused debug arg from nestri-server.
- Moved configs to config file folder rather than keeping them in
containerfile.
- Improved audio configs, moved some into wireplumber to keep things
tidy.
- Bit better arg handling in nestri-server.

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* Optional 10‑bit video support and auto‑launch of an app after display
setup.

* **Changes**
* Standardized runtime/user env to NESTRI_* with updated home/cache
paths and explicit LANG; password generation now logged.
* Improved container/GPU detection and startup logging; reduced blanket
root usage during startup; SSH setup surfaced.
* WirePlumber/PipeWire moved to JSON configs; low‑latency clock and
loopback audio policies added; audio capture defaults to PipeWire.
  
* **Chores**
* GStreamer/libp2p dependency upgrades and Rust toolchain pinned; NVIDIA
driver capability exposed.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

---------

Co-authored-by: DatCaptainHorse <DatCaptainHorse@users.noreply.github.com>

packages/server/src/args/device_args.rs

@@ -1,37 +1,48 @@
 pub struct DeviceArgs {
     /// GPU vendor (e.g. "intel")
-    pub gpu_vendor: String,
+    pub gpu_vendor: Option<String>,
     /// GPU name (e.g. "a770")
-    pub gpu_name: String,
-    /// GPU index, if multiple same GPUs are present, -1 for auto-selection
-    pub gpu_index: i32,
+    pub gpu_name: Option<String>,
+    /// GPU index, if multiple same GPUs are present, None for auto-selection
+    pub gpu_index: Option<u32>,
     /// GPU card/render path, sets card explicitly from such path
-    pub gpu_card_path: String,
+    pub gpu_card_path: Option<String>,
 }
 impl DeviceArgs {
     pub fn from_matches(matches: &clap::ArgMatches) -> Self {
         Self {
             gpu_vendor: matches
                 .get_one::<String>("gpu-vendor")
-                .unwrap_or(&"".to_string())
-                .clone(),
+                .cloned(),
             gpu_name: matches
                 .get_one::<String>("gpu-name")
-                .unwrap_or(&"".to_string())
-                .clone(),
-            gpu_index: matches.get_one::<i32>("gpu-index").unwrap_or(&-1).clone(),
+                .cloned(),
+            gpu_index: matches
+                .get_one::<u32>("gpu-index")
+                .cloned(),
             gpu_card_path: matches
                 .get_one::<String>("gpu-card-path")
-                .unwrap_or(&"".to_string())
-                .clone(),
+                .cloned(),
         }
     }
 
     pub fn debug_print(&self) {
         tracing::info!("DeviceArgs:");
-        tracing::info!("> gpu_vendor: '{}'", self.gpu_vendor);
-        tracing::info!("> gpu_name: '{}'", self.gpu_name);
-        tracing::info!("> gpu_index: {}", self.gpu_index);
-        tracing::info!("> gpu_card_path: '{}'", self.gpu_card_path);
+        tracing::info!(
+            "> gpu_vendor: '{}'",
+            self.gpu_vendor.as_deref().unwrap_or("auto")
+        );
+        tracing::info!(
+            "> gpu_name: '{}'",
+            self.gpu_name.as_deref().unwrap_or("auto")
+        );
+        tracing::info!(
+            "> gpu_index: {}",
+            self.gpu_index.map_or("auto".to_string(), |i| i.to_string())
+        );
+        tracing::info!(
+            "> gpu_card_path: '{}'",
+            self.gpu_card_path.as_deref().unwrap_or("auto")
+        );
     }
 }