Drop deprecated version key, add SELinux volume labels, SIGTERM handling with 30s grace period, configurable master URL via PPF_MASTER_URL env var, and usage documentation in headers.
Replace raw podman run with declarative compose.yml per host type. Master (odin) gets compose.master.yml, workers get compose.worker.yml.