fix: dynamic port detection + electrumx sync + rootless infra

Backend:
- Remove most hardcoded port overrides from docker_packages.rs, use
  dynamic port extraction from actual container bindings with fallback
  to static map in PodmanClient
- Fix OnlyOffice (8044), NginxPM (8181), Fedimint (8174) port mappings
- Remove Tailscale fake web UI port (no web UI)
- ElectrumX: detect "Connection reset" as syncing state (not error)

Deploy script:
- Auto-configure sysctl unprivileged_port_start=80 for rootless
- Auto-enable loginctl linger for container persistence
- Auto-enable podman.socket for Portainer

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

core/container/src/podman_client.rs

@@ -71,14 +71,14 @@ impl PodmanClient {
         let url = match name {
             "bitcoin-knots" | "bitcoin-ui" => "http://localhost:8334",
             "lnd" | "archy-lnd-ui" => "http://localhost:8081",
-            "tailscale" => "http://localhost:8240",
+            // Tailscale has no web UI — managed via CLI/app
             "homeassistant" => "http://localhost:8123",
             "archy-mempool-web" | "mempool" => "http://localhost:4080",
             "btcpay-server" => "http://localhost:23000",
             "grafana" => "http://localhost:3000",
             "searxng" => "http://localhost:8888",
             "ollama" => "http://localhost:11434",
-            "onlyoffice" => "http://localhost:9980",
+            "onlyoffice" => "http://localhost:8044",
             "penpot" => "http://localhost:9001",
             "nextcloud" => "http://localhost:8085",
             "vaultwarden" => "http://localhost:8082",
@@ -86,10 +86,10 @@ impl PodmanClient {
             "photoprism" => "http://localhost:2342",
             "immich_server" | "immich" => "http://localhost:2283",
             "filebrowser" => "http://localhost:8083",
-            "nginx-proxy-manager" => "http://localhost:81",
+            "nginx-proxy-manager" => "http://localhost:8181",
             "portainer" => "http://localhost:9000",
             "uptime-kuma" => "http://localhost:3001",
-            "fedimint" => "http://localhost:8175",
+            "fedimint" | "fedimintd" => "http://localhost:8174",
             "fedimint-gateway" => "http://localhost:8176",
             "nostr-rs-relay" => "http://localhost:18081",
             "indeedhub" => "http://localhost:7777",