feat: apply memory shrink + daemon.json — ground truth update [#731]

11 apps reslidered via API (53.4->29.0GB explicit limits); daemon.json
live-restore + nofile defaults applied (log keys banned: unit flag
conflict — see #731 incident note). perf/apply-memory-shrink.sh codifies
the change. All 159 apps verified running.
Meat: https://projects.knownelement.com/issues/731#note-3929

questions-v1.md

@@ -26,5 +26,9 @@ bounces (~300). live-restore is currently false so there is no zero-downtime
 path. Until then the postgres nofile bridge is ephemeral (lost on postgres
 container recreate).
 
-- [ ] Pick a window (suggest: pre-storm weekday morning) — agent will ticket
-      the runbook + execute on your go
+## 2. docker daemon.json bounce window (see README "Ground truth")
+
+- [x] Pick a window — founder chose 2026-09-02 ~19:30 CDT (pre-storm).
+      APPLIED: live-restore + default-ulimits nofile 262144 now active; first
+      attempt failed (log-driver flag conflict — unit passes journald), fixed
+      by dropping log keys; see #731 for the incident record.