Release rolling / release (push) Successful in 9m12s
Create the docker group when missing, usermod -aG with verification, align socket group/mode when needed, and set systemd Group and SupplementaryGroups so the service can access the Docker socket.