This patch uses the absolute repository name, making sure that
multi-registry configs, like cri-o uses on Fedora won't try to pull
things from quay or other registries.

This patch reduces the default resource requests, helping to improve the
resilience in case a single node goes down. This way the remaining nodes
aren't overwhelmed by resource requests for CPU.

This patch increases the per-user inotify limit in order to allow some
use-case e.g. jellyfin to utilise inotify to check media files.