fix(controller): add /var/run/fleet.sock bind mount to systemd unit