Mooring: A security-first self-hosted PaaS separates read and write planes

Mooring is a new self-hosted PaaS that runs as an unprivileged systemd service, not root, and uses a read-only Docker socket proxy for dashboards. It separates the read plane (logs, health) from the write plane (deploy, restart) to limit attack surface. The Go binary embeds all assets, uses SQLite, and supports TOTP 2FA with session revocation on credential changes.