_load_service_container_names() reads decnet-state.json and builds the exact set of expected container names ({decky}-{service}). is_service_container() and is_service_event() do a direct set lookup — no regex, no label inspection, no heuristics.