The base image never starts a service (closes #16)

build.sh and bin/test used to start valkey-server and ping it to prove it runs;
they now check it with valkey-server --version and valkey-cli --version, so the
ping loop, shutdown, and the cleanup of the Valkey run's log files are gone.
/var/log/valkey and /var/log/nginx keep their package owners and modes, and
nginx -t stays. README states that Valkey, PostgreSQL and nginx are installed
but never run. No package install starts a service: invoke-rc.d already denies
every start, and no ENTRYPOINT or CMD starts one.

Model: deepseek-v4-pro

README.md

@@ -1,10 +1,9 @@
 # baseimage
 
 A fat Docker base image that trades size for build speed. Everything a
-typical Go, Node, Python, or Hugo project needs is preinstalled, so child
-images only have to copy their source and build, instead of spending the
-first few minutes of every build on `apt-get install` and toolchain
-downloads.
+typical Go, Node, Python, or Hugo project needs is preinstalled. Child
+images only copy their source and build, without spending the first
+minutes of every build on `apt-get install` and toolchain downloads.
 
 Image: `git.eeqj.de/sneak/baseimage`, built for `linux/amd64` and
 `linux/arm64`.
@@ -140,6 +139,9 @@ exec /usr/local/bin/myapp
 Services should log to stdout/stderr; the container's log is the combined
 output of all services.
 
+The image installs Valkey, PostgreSQL and nginx but never runs them; a child
+image that wants one runs it as a service.
+
 The image sets `CMD ["/usr/local/sbin/runsvinit"]` and no `ENTRYPOINT`, so
 a child image that only needs one unsupervised process can override `CMD`
 and ignore runit entirely, and `docker run -it image bash` works as