pub async fn require_docker() -> Result<()>
Validate that Docker is available; return a friendly error if not.