deploy: NoNewPrivileges=no so rootless podman can start !304

merged merged by cmc on 2026-09-06 23:34 UTC · krz/gitbay:runner-nonewprivs into main