Package preflight validates the runtime environment before any
restore operation begins. Its job is to fail fast: if Docker,
restic, environment variables, or secret files are missing or
misconfigured, we must abort before touching the backup.
RunAll executes every preflight check and returns the results in order.
It always returns all results, even if some fail — the caller decides
whether to abort based on HasFailures.