Sonarr/Radarr root folders created via API (201). Lidarr/Readarr deferred to first-run wizard (v1 validators demand quality-profile ids that don't exist yet). Root cause of the write failures: LSIO PUID=1000 under rootless podman maps to host uid 101000 — a phantom user owning nothing; PUID=0 maps to the host user that owns every media dir.