Read-only: inotify limits vs live use, dockerd+containerd uptime, dockerd
24h err/warn count, pg too-many-clients. Only auto-fix is re-applying the
#755-approved inotify sysctls on drift.
Details: https://projects.knownelement.com/issues/757#note-1
CPU via the same docker stats pass joined to app fqdns; disk = root fs
pct + docker system df + top-15 appdata dirs joined to fqdns. CPU/disk
are REPORT-ONLY per t/317 (human-required class).
Details: https://projects.knownelement.com/issues/757#note-1