fix: container install flow, filebrowser auth, AppCard enrichment

- Fix .198-style fresh installs: systemd service ExecStartPre creates
  /run/user/1000, enable podman.socket, chmod 644 /etc/hosts
- Filebrowser: add /data volume for database (fixes read-only crash),
  secure auth with random password via backend RPC (no more admin/admin)
- AppCard: enrich installing state with marketplace metadata (icon,
  title, description, tier badge, author, version)
- Registry: btcpayserver 1.13.5 → 1.13.7, images mirrored
- ReadWritePaths: add home container paths for rootless podman

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

image-recipe/archipelago-scripts/install-to-disk.sh

@@ -142,6 +142,7 @@ cat > /mnt/archipelago/etc/hosts <<EOF
 
 ::1         localhost ip6-localhost ip6-loopback
 EOF
+chmod 644 /mnt/archipelago/etc/hosts
 
 # Install bootloader and essential packages in chroot
 echo "📦 Configuring package sources..."