Vozec/CVE-2026-41651 ? reverse-engineered prompt

Build me a small Linux proof of concept in C that demonstrates the PackageKit race condition described in CVE 2026 41651.

I want it to create a transaction, send one harmless InstallFiles request first, then quickly send a second InstallFiles request with the real payload before the first one finishes, so the daemon ends up using the wrong flags and paths. The program should clearly show each step in the terminal, wait for the package action to complete, and then check whether the payload landed as root. If the target system is already fixed, it should print that it looks patched and stop cleanly.

Please make it easy to run on a normal Debian or Ubuntu machine, and include a Docker setup that starts the needed services and runs the demo in an isolated container. Keep the build simple, with a Makefile and a short README explaining how to compile and run it. If you need current PackageKit behavior or exact library details, look them up online first.