Update Fedimint configuration and enhance onboarding process

- Upgraded Fedimint version to v0.10.0 in docker-compose.yml and manifest.yml, adding support for the built-in Guardian UI.
- Modified .gitignore to exclude deploy-config.sh script.
- Enhanced onboarding process in AuthManager to persist onboarding state and validate password strength during user setup.
- Updated API to handle onboarding completion and password change requests, ensuring a smoother user experience.
- Improved configuration management to support Nostr discovery and Tor proxy settings, enhancing node identity features.

core/archipelago/src/api/handler.rs

@@ -1,4 +1,6 @@
 use crate::api::rpc::RpcHandler;
+use crate::electrs_status;
+use crate::node_message as node_msg;
 use crate::config::Config;
 use crate::state::StateManager;
 use anyhow::Result;
@@ -20,7 +22,7 @@ pub struct ApiHandler {
 
 impl ApiHandler {
     pub async fn new(config: Config, state_manager: Arc<StateManager>) -> Result<Self> {
-        let rpc_handler = Arc::new(RpcHandler::new(config.clone()).await?);
+        let rpc_handler = Arc::new(RpcHandler::new(config.clone(), state_manager.clone()).await?);
 
         Ok(Self {
             _config: config,
@@ -45,7 +47,7 @@ impl ApiHandler {
         let (parts, body) = req.into_parts();
         let body_bytes = hyper::body::to_bytes(body).await
             .map_err(|e| anyhow::anyhow!("Failed to read body: {}", e))?;
-        let req_with_bytes = Request::from_parts(parts, hyper::Body::from(body_bytes));
+        let req_with_bytes = Request::from_parts(parts, hyper::Body::from(body_bytes.clone()));
 
         debug!("{} {}", method, path);
 
@@ -55,6 +57,10 @@ impl ApiHandler {
                 .status(StatusCode::OK)
                 .body(hyper::Body::from("OK"))
                 .unwrap()),
+            (Method::POST, "/archipelago/node-message") => {
+                Self::handle_node_message(body_bytes).await
+            }
+            (Method::GET, "/electrs-status") => Self::handle_electrs_status().await,
             (Method::GET, path) if path.starts_with("/api/container/logs") => {
                 Self::handle_container_logs_http(self.rpc_handler.clone(), path).await
             }
@@ -116,6 +122,39 @@ impl ApiHandler {
         }
     }
 
+    async fn handle_node_message(body: hyper::body::Bytes) -> Result<Response<hyper::Body>> {
+        #[derive(serde::Deserialize)]
+        struct Incoming {
+            from_pubkey: Option<String>,
+            message: Option<String>,
+        }
+        let incoming: Incoming = serde_json::from_slice(&body).unwrap_or(Incoming {
+            from_pubkey: None,
+            message: None,
+        });
+        if let (Some(from), Some(msg)) = (incoming.from_pubkey, incoming.message) {
+            tracing::info!("📩 Received message from {}: {}", from, msg);
+            node_msg::store_received(&from, &msg).await;
+        }
+        Ok(Response::builder()
+            .status(StatusCode::OK)
+            .header("Content-Type", "application/json")
+            .header("Access-Control-Allow-Origin", CORS_ANY)
+            .body(hyper::Body::from(r#"{"ok":true}"#))
+            .unwrap())
+    }
+
+    async fn handle_electrs_status() -> Result<Response<hyper::Body>> {
+        let status = electrs_status::get_electrs_sync_status().await;
+        let body = serde_json::to_vec(&status).unwrap_or_default();
+        Ok(Response::builder()
+            .status(StatusCode::OK)
+            .header("Content-Type", "application/json")
+            .header("Access-Control-Allow-Origin", CORS_ANY)
+            .body(hyper::Body::from(body))
+            .unwrap())
+    }
+
     async fn handle_lnd_proxy(path: &str) -> Result<Response<hyper::Body>> {
         let suffix = path.strip_prefix("/proxy/lnd").unwrap_or("/");
         let url = format!("http://127.0.0.1:8080{}", suffix);