Fix dead/incorrect vars and consolidate duplicated logic into common.sh

Codebase-wide audit pass: fixed real bugs (SSH hangs missing BatchMode,
local-outside-function no-ops, variable name collisions, a truncated
ratio calc, wrong state-dir path, DARK vs NO_INTERNET drift, and more),
then pulled logic that was duplicated across multiple scripts — arr
cleanup safety gates, docker restart ordering, container maintenance
stop/restart, watchdog state-file helpers, partnership role resolution,
cert expiry checks, remote node discovery, and TMDB discovery scoring —
into common.sh so each now has a single implementation.

Watchdogs/docker_watchdog.sh

@@ -194,6 +194,9 @@
 #   WATCHDOG_CONTAINER_RESTART_LIMIT / WATCHDOG_CONTAINER_RESTART_WINDOW
 #       Restart loop protection: attempt limit and rolling window in hours
 #
+#   WATCHDOG_REQUIRED_STRIKE_LIMIT
+#       Consecutive down-checks on a required container before a restart is attempted (default: 2)
+#
 #   WATCHDOG_BATCH_NOTIFY
 #       Collect cycle events and send as one notification (default: true)
 #
@@ -337,19 +340,15 @@ fi
 # ── HELPER FUNCTIONS ──────────────────────────────────────────────────────────────────────────
 # ==============================================================================================
 
-# Get strike count for a container from state file
+# Get strike count for a container from state file — wraps common.sh's wd_state_get()
 get_strikes() {
-    grep "^${1}:" "${2}" 2>/dev/null | cut -d: -f2 || echo "0"
+    wd_state_get "$1" "$2"
 }
 
-# Set strike count for a container in state file
+# Set strike count for a container in state file — wraps common.sh's wd_state_set()
 set_strikes() {
     local container="$1" count="$2" file="$3"
-    if grep -q "^${container}:" "$file" 2>/dev/null; then
-        sed -i "s/^${container}:.*/${container}:${count}/" "$file"
-    else
-        echo "${container}:${count}" >> "$file"
-    fi
+    wd_state_set "$container" "$count" "$file"
 }
 
 # Check if container is on the persistent skip list
@@ -763,10 +762,10 @@ CYCLE_START=$(date +%s)
                 STRIKES=$(get_strikes "$container" "$WATCHDOG_STATE_FILE")
                 STRIKES=$(( STRIKES + 1 ))
                 set_strikes "$container" "$STRIKES" "$WATCHDOG_STATE_FILE"
-                warn "$container — not running, exit ${LAST_EXIT} (strike $STRIKES/$SYS_WATCHDOG_STRIKE_LIMIT)"
+                warn "$container — not running, exit ${LAST_EXIT} (strike $STRIKES/${WATCHDOG_REQUIRED_STRIKE_LIMIT:-2})"
                 ((T1_WARNINGS++))
 
-                if [[ "$STRIKES" -ge "$SYS_WATCHDOG_STRIKE_LIMIT" ]]; then
+                if [[ "$STRIKES" -ge "${WATCHDOG_REQUIRED_STRIKE_LIMIT:-2}" ]]; then
                     result=0
                     safe_restart "$container" "required container down (exit ${LAST_EXIT})" || result=$?
                     case $result in