A practical checklist for building and running containers safely (images, runtime, secrets, and supply chain).