run the root check warn-only on hyperhive's own containers, per unit, not on the container@ template

nix/host-modules/swarm-ci-runner.nix

@@ -43,6 +43,8 @@ let
   # below compares the two, so both come from here.
   forgeUrl = "https://${forgeCfg.domain}";
 
+  rootfsCheck = import ./lib/container-rootfs-check.nix { inherit config; };
+
   # The forge's gateway serves a leaf from the store's `pki` mount in
   # self-signed mode.
   # The runner daemon is Go, whose `SSL_CERT_FILE` replaces the system store,
@@ -329,6 +331,7 @@ in
     # minting unit in and waits for it, as ./swarm-builder.nix's does.
     systemd.services."container@${machine}" = lib.mkMerge [
       caTrust.containerOrdering
+      (rootfsCheck.warnOnly machine)
       {
         after = [ "swarm-bao-pki.service" ];
         wants = [ "swarm-bao-pki.service" ];