Container Health Checks in nerdctl

How Docker-compatible health checks work in nerdctl, and why we built them on systemd timers instead of a daemon.