LND crashes with "netlinkrib: address family not supported by protocol" in rootless podman because it needs NET_RAW to enumerate network interfaces during TLS certificate generation. Added to capabilities in config.rs, first-boot-containers.sh, and container-specs.sh. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>