[Proxicon]

The published API can exit during concurrent PostgreSQL/GSS hostname lookups in the Alpine runtime. Use the official Noble API runtime and SDK while preserving Kerberos, ICU, time-zone support and the existing wget health check. The first-run smoke now requires one readable native GSS library, successful dependency resolution and the same IANA time-zone data.

Delayed permission callbacks from an earlier guided/manual mode can alter the current grant. Bind each rendered selector to its mode owner and preserve legitimate selections on same-mode clicks. Callback scopes still require the recorded request and task IDs. Update the container shell guidance for the API image.

Validation:

• Final five-file source independently reviewed at 48b30fb, with all 327 protected file hashes preserved.
• Fresh final solution build: all 14 projects, 0 errors, the same 21 baseline warnings.
• Consent-page suite: 18 passed, 0 failed/skipped. The three new cases each fail against the previous UI and pass with this correction.
• Full solution suite: 1,978 passed, 0 failed, the same six baseline skips. All 1,981 previous main case/class/method outcomes are preserved. This run covered 43bbb70; the final commit changes only the reviewed smoke script and documentation, with all .NET/test and Docker inputs unchanged.
• Smoke script syntax validated. Current PR/main CI and ordinary published-peer startup/reciprocal acceptance remain the subsequent gates; no claim that selector callbacks caused the earlier hosted retry.

Refs #126, #124 and #121. Companion acceptance: BostonTechnologies/netratel#164 and BostonTechnologies/netratel#141.