Single-binary mirror-registry with self-sufficient serve (auto-bootstrap SQLite, admin user, TLS certs), idempotent install via Podman Quadlet, slog structured logging with logrus bridge, and clean package architecture.
E2E workflow builds the container image from Dockerfile.mirror (ubi9-micro), deploys via `quay install -image-archive`, mirrors 9 public images with oc-mirror v2, and verifies via catalog API and podman pull.
