Hardening the Build Swarm: Ghost Drones and NAT Masquerade Attacks

How a forgotten LXC container infiltrated my build swarm, and the NAT masquerade bug that almost rebooted my gateway. Lessons in zero-trust networking for homelabs.