Porting queue remediation: promote only build/run-verified containers and fix startup/build blockers

[Copilot]

This continues the porting queue cleanup by only moving containers from failing to passing after they both build and start with --no-healthcheck while exposing the expected app process/log behavior. The work focuses on minimal, localized build/startup fixes in queue entries.

• Queue progression in this PR

  • Promoted from porting/queues/failing to porting/queues/passing after verification:
    • bookstack, flexget, ubooquity, unrar
    • webgrabplus, phpmyadmin, piwigo
    • dokuwiki, kasm
    • emulatorjs, luanti, minetest, pydio-cells
  • Returned to failing when later verification failed:
    • freetube, series-troxide, tvheadend

• Readonly-rootfs startup hardening

  • Reworked startup scripts to avoid mutating /app at runtime; gated app-tree mutations behind writability checks and shifted writable state to /config//tmp fallbacks where needed.
  • Added explicit runtime execs in entries that previously had placeholder or unreachable startup flow.
  • Applied to: webgrabplus, phpmyadmin, piwigo, dokuwiki, luanti, minetest, pydio-cells, kasm.

• Build blockers removed (localized)

  • emulatorjs
    • fixed missing stage arg propagation (ARG VERSION in nodebuilder)
    • fixed non-idempotent directory creation (mkdir -p /data)
    • removed broken pinned node binary fetch and installed runtime nodejs
    • guarded optional IPFS path in startup.
  • luanti
    • removed invalid linker default (-lintl)
    • added missing curl dev dependency
    • ensured /defaults exists before seeding config
    • added writable data-dir fallback with runtime env alignment.
  • minetest
    • removed GitHub API-dependent source build steps that were failing in-container
    • aligned server invocation to luantiserver with default --gameid.
  • pydio-cells
    • added missing build-stage args (VERSION, TARGETARCH, BUILD_DATE)
    • corrected build ldflags version value
    • cleaned broken startup command flow
    • hardened inline openssl config printf.

• Targeted startup correctness cleanup

  • flexget: removed dead /data command path, fixed default config seed path, fixed case wildcard default.
  • kasm: aligned runtime node binary usage, ensured expected cert/script paths and permissions, deduplicated gpuinfo.sh source and quoting.

Example of the startup pattern applied across affected entries:

DATA_DIR="/config/.appdata"
if [[ ! -w /config ]] || ! mkdir -p "${DATA_DIR}/..." ; then
  DATA_DIR="/tmp/.appdata"
  mkdir -p "${DATA_DIR}/..."
fi

# mutate app tree only when writable
if [[ -w /app/www/public ]]; then
  # migration/symlink logic
fi

exec <app-binary> ...

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.