VoxIP Kiosk OS 1.0.0: Raspberry Pi kiosk with web management

Chromium kiosk without a desktop for the Raspberry Pi 3, a Flask web
interface on port 8080 (kiosk, system and network management), a
restricted root helper, network changes with automatic rollback, a
healthcheck timer, install/update/uninstall scripts and a pi-gen image
build.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

systemd/voxip-kiosk-agent.service

@@ -0,0 +1,28 @@
+[Unit]
+Description=VoxIP Kiosk agent (navigatie, offlinepagina, verversen)
+Documentation=file:///usr/share/doc/voxip-kiosk/README.md
+After=voxip-kiosk-browser.service
+
+[Service]
+Type=simple
+User=kiosk
+Group=kiosk
+RuntimeDirectory=voxip-kiosk-agent
+RuntimeDirectoryMode=0755
+ExecStart=/usr/lib/voxip-kiosk/voxip-kiosk-agent
+Restart=always
+RestartSec=5
+SyslogIdentifier=voxip-kiosk-agent
+NoNewPrivileges=yes
+ProtectSystem=strict
+ProtectHome=yes
+PrivateTmp=yes
+PrivateDevices=yes
+ProtectKernelTunables=yes
+ProtectKernelModules=yes
+ProtectControlGroups=yes
+RestrictSUIDSGID=yes
+LockPersonality=yes
+
+[Install]
+WantedBy=multi-user.target