0.24.0

• 9cc255f Harden enroot / importer exec paths
• 8d8fae8 Start squashfs images from importers with squashfuse
• 2eb8b71 Add --container-unshare=net,ipc,uts for lightweight isolation
• 3d4feb7 Improve mutex error handling
• dcdf11e Improve error messages for container startup failures
• 1dccf50 Include image name in error messages during container setup
• 26fa047 Forward SIGTERM to child processes instead of ignoring it
• 3c58d86 Validate source paths for bind mounts
• aff5834 Perform fstab character escaping to handle mounts with spaces