Docker containers running inside LXD need security_opt apparmor=unconfined
to avoid permission denied errors on Unix socket creation (anvil, postgres).
Umami port moved from 3000 to 3001 to avoid conflict with Forgejo when
running alongside the disinto factory stack.
