feat: TASK-49 container reliability — tests, orchestration, MASTER_PLAN

- Add orchestration_tests.rs + mock_podman.rs (container unit tests)
- Add container-tests.yml CI workflow
- Add dev-container-test.sh for local testing
- MASTER_PLAN.md: add TASK-49 (P0) with 6-phase plan
- Login.vue: minor fixes from user testing
- AppCard.vue: enter key handler fix

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

neode-ui/src/views/apps/AppCard.vue

@@ -8,7 +8,7 @@
     :class="{ 'card-stagger': showStagger }"
     :style="{ '--stagger-index': index }"
     @click="$emit('goToApp', id)"
-    @keydown.enter="$emit('goToApp', id)"
+    @keydown.enter="handleEnter"
   >
     <!-- Installing overlay -->
     <div
@@ -188,7 +188,7 @@ const props = defineProps<{
   isUninstalling: boolean
 }>()
 
-defineEmits<{
+const emit = defineEmits<{
   goToApp: [id: string]
   launch: [id: string]
   start: [id: string]
@@ -197,6 +197,12 @@ defineEmits<{
   showUninstall: [id: string, pkg: PackageDataEntry]
 }>()
 
+function handleEnter(e: KeyboardEvent) {
+  // Controller nav already handled this Enter (preventDefault was called) — skip to avoid double navigation
+  if (e.defaultPrevented) return
+  emit('goToApp', props.id)
+}
+
 const isWebOnly = computed(() => isWebOnlyApp(props.id))
 
 // Enrich from marketplace when backend data is sparse (e.g. during install)