docs: update AGENTS/SAFE_FILES/rationale na D-Bus verwijdering

- AGENTS.md: run-commando bijgewerkt (verwijder brede /run/user/1000
  mount en DBUS_SESSION_BUS_ADDRESS); notitie D-Bus niet meer vereist
- SAFE_FILES.md: verwijder DBUS_SESSION_BUS_ADDRESS; beschrijf
  concrete mounts (Podman socket + helper directory)
- podman-helper-rationale.md: daemon-reload sectie bijgewerkt —
  gaat nu via helper ipv D-Bus; samenvattingstabel gecorrigeerd

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

AGENTS.md

@@ -93,9 +93,8 @@ podman run -d --pod mvp-pod \
   --ipc=host \
   --pid=host \
   -e XDG_RUNTIME_DIR=/run/user/1000 \
-  -e DBUS_SESSION_BUS_ADDRESS=unix:path=/run/user/1000/bus \
-  -v /run/user/1000:/run/user/1000:rw \
   -v /run/user/1000/podman/podman.sock:/run/user/1000/podman/podman.sock:rw \
+  -v /run/user/1000/podman-mvp:/run/podman-mvp \
   -v /home/kodi/.config/containers:/app/workloads:rw \
   mvp-control:latest
 
@@ -103,7 +102,7 @@ podman run -d --pod mvp-pod \
 Important notes:
 - Backend communicates with Podman through unix socket.
 - User-session Podman is used (not root).
-- DBus access is required.
+- D-Bus is NOT required — alle systemctl-acties gaan via podman-helper.
 - Host PID/IPC namespaces are intentional.
 
 Do NOT change these assumptions without proposal.