improved compatibility with raspberry pi OS #22

Job	Run time
Security: Filesystem Isolation (File Privacy)	27s
Resilience: Orphan Grandchild Reaping	28s
Security: Disk Cleanup (Storage Exhaustion)	33s
Security: Memory Limit (Hard OOM)	28s
Resource: Fork Bomb Containment	35s
Security: Network Namespace (Localhost Bridge)	33s
Resilience: I/O Flood (Bounded Stderr)	30s
Resilience: Privileged Syscall Denial	30s
Resilience: Signal Trap Uses SIGKILL Timeout	28s
Resilience: Inode Exhaustion Safety	34s
	5m 6s

Provide feedback