Recover built its up-set from every listed container, so a stopped/exited
container or a dead unikernel VM (whose state dir is still listed) counted
as already-running and was skipped — the exact reason dead VMs stayed in
drift instead of being recovered. Filter the set to State==running.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>