Starting the Frigate container can take quite some time, since `podman` needs to check permissions/SELinux labels for the entire media volume.
* Switch to Quadlet-style `.container` for systemd unit * Update to new image tag naming scheme (not arch-specific) * Use environment variables for secrets * Allow the entire `frigate_config` variable to be overridden