Declare geoclue's /var wherever geoclue is, not wherever the client is
Declare libX11's cache for both profiles, not only the client
Make bootc container lint fatal, and clear what it was warning about