quadlet: drop the userns identity model — rootless cannot map uid 997

Evidence from the failed first cutover: podman top shows container root
maps to dank (1000) under UserNS=host rootless (subuid range 100000:65536
cannot express 997), so PUID=997 fell back to root and PMS crash-looped on
write access to its 997:984-owned data root. Fleet model instead: PUID=0/
PGID=0 (container root = dank, same as jellyfin/copyparty data roots) and
deploy_plex chowns /var/lib/plexmediaserver to 1000:1000 inside the
first-cutover block. Zero bytes moved; rollback regains one chown -R
997:984 step, documented in Plex.md. Seam test pins PUID=0/PGID=0 and the
absence of any userns key.

dankserver/tautulli/quadlet/tautulli.container

@@ -1,14 +1,13 @@
 [Unit]
-Description=Tautulli (quadlet, userns=host)
+Description=Tautulli (quadlet, rootless fleet identity)
 After=network-online.target
 Wants=network-online.target
 
 [Container]
 Image=lscr.io/linuxserver/tautulli:v2.18.1-ls242
-UserNS=host
 Network=dankserver_appnet:alias=tautulli
-Environment=PUID=1000
-Environment=PGID=1000
+Environment=PUID=0
+Environment=PGID=0
 Environment=TZ=America/Los_Angeles
 Volume=/home/dank/Containers/tautulli:/config
 PublishPort=8181:8181