Media build part 1 (unreleased): real restart (R-1026), media apps on every PRESENT drive via an owned compose override (R-1023), dead-drive check from mountinfo, removal never deletes shared/:ro binds (R-1027), safety list knows userdata (R-1032), no drive question for media apps (R-1031)

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

controller/internal/system/mountdead_other.go

@@ -0,0 +1,6 @@
+//go:build !linux
+
+package system
+
+// MountIsShutdown is linux-only; elsewhere nothing is ever dead.
+func MountIsShutdown(_ string) bool { return false }