A multi-stage build shipping the daemon: bash, git, and a CA store in the runtime so git and tarball seeds work; the base directory is a volume, the token is a flag with no env default, the port must be passed because the binary defaults to an OS pick. Smoke-tested against a real daemon: healthz auth, exec, put/get, session dirs under the mounted base.