feat: bitcoin-ui CSS fix, HTTPS proxy support, deploy script improvements

Bitcoin UI:
- Replace cdn.tailwindcss.com with locally bundled tailwind.css (CSP blocks external scripts)
- Make all asset paths relative for nginx proxy compatibility
- Add bitcoin-ui build/deploy to deploy-to-target.sh (was missing entirely)
- Use --network host (bitcoin-ui proxies Bitcoin RPC at 127.0.0.1:8332)

HTTPS mixed content fix:
- Add HTTPS_PROXY_PATHS in AppSession.vue — when parent page is HTTPS,
  iframe loads through nginx proxy instead of direct HTTP port
- Prevents browser blocking HTTP iframes inside HTTPS pages
- All Tailscale servers use HTTPS, this was breaking all app iframes

Deploy & first-boot improvements:
- first-boot-containers.sh auto-detects disk size for pruning vs txindex
- first-boot-containers.sh checks fallback source path for UI containers
- Added mempool-electrs to APP_PORTS mapping
- ElectrumX container creation in first-boot
- Podman doctor/fix/uptime skills added

Also includes: session persistence, identity management, LND transactions,
ElectrumX status UI, nostr-provider improvements, Web5 enhancements

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

neode-ui/src/components/NostrIdentityPicker.vue

@@ -6,13 +6,16 @@
         class="fixed inset-0 z-[3100] flex items-center justify-center p-4"
         @click="$emit('cancel')"
       >
-        <!-- Backdrop — near-black -->
-        <div class="absolute inset-0 bg-black/90 backdrop-blur-xl"></div>
+        <!-- Backdrop — frosted blur -->
+        <div class="absolute inset-0 bg-black/40 backdrop-blur-2xl"></div>
 
         <!-- Main panel -->
         <div
           ref="modalRef"
           @click.stop
+          role="dialog"
+          aria-modal="true"
+          :aria-label="`Select identity for ${appName}`"
           class="relative z-10 w-full max-w-lg"
         >
           <!-- Header: screensaver-style glass disc + radial viz ring -->
@@ -43,7 +46,7 @@
           </div>
 
           <!-- Identity list -->
-          <div class="glass-card p-4 space-y-3 max-h-[50vh] overflow-y-auto">
+          <div class="glass-card p-4 space-y-2 max-h-[50vh] overflow-y-auto" role="radiogroup" aria-label="Available identities">
             <div v-if="loading" class="flex items-center justify-center py-8">
               <svg class="animate-spin h-6 w-6 text-white/40" viewBox="0 0 24 24" fill="none">
                 <circle class="opacity-25" cx="12" cy="12" r="10" stroke="currentColor" stroke-width="4" />
@@ -61,15 +64,18 @@
               v-for="identity in identities"
               :key="identity.id"
               type="button"
-              class="w-full text-left p-3 rounded-lg border transition-all duration-200"
+              role="radio"
+              :aria-checked="selectedId === identity.id"
+              :aria-label="`Identity: ${identity.name}`"
+              class="w-full text-left p-3 rounded-lg transition-all duration-200"
               :class="selectedId === identity.id
-                ? 'bg-white/8 border-white/25'
-                : 'bg-white/3 border-white/8 hover:bg-white/6 hover:border-white/15'"
+                ? 'bg-white/10 ring-1 ring-white/20'
+                : 'bg-white/[0.03] hover:bg-white/[0.06]'"
               @click="selectedId = identity.id"
             >
               <div class="flex items-center gap-3">
                 <div
-                  class="w-9 h-9 rounded-lg flex items-center justify-center shrink-0 border"
+                  class="w-9 h-9 rounded-lg flex items-center justify-center shrink-0"
                   :class="avatarClasses(identity.purpose)"
                 >
                   <span class="text-sm font-bold">{{ identity.name.charAt(0).toUpperCase() }}</span>
@@ -85,10 +91,10 @@
                   </div>
                 </div>
                 <div class="shrink-0">
-                  <div v-if="selectedId === identity.id" class="w-5 h-5 rounded-full bg-white/20 border border-white/50 flex items-center justify-center">
-                    <div class="w-2.5 h-2.5 rounded-full bg-white/80"></div>
+                  <div v-if="selectedId === identity.id" class="w-5 h-5 rounded-full bg-white/15 flex items-center justify-center">
+                    <div class="w-2.5 h-2.5 rounded-full bg-white/70"></div>
                   </div>
-                  <div v-else class="w-5 h-5 rounded-full border border-white/15"></div>
+                  <div v-else class="w-5 h-5 rounded-full bg-white/5"></div>
                 </div>
               </div>
             </button>
@@ -104,8 +110,8 @@
               :disabled="!selectedId || !hasNostrKey"
               class="flex-1 py-3 rounded-lg text-sm font-semibold transition-all duration-200 disabled:opacity-30 disabled:cursor-not-allowed"
               :class="selectedId && hasNostrKey
-                ? 'bg-white/10 border border-white/25 text-white hover:bg-white/15'
-                : 'bg-white/3 border border-white/8 text-white/40'"
+                ? 'bg-white/10 text-white hover:bg-white/15'
+                : 'bg-white/[0.03] text-white/40'"
             >
               Authenticate
             </button>
@@ -193,9 +199,9 @@ function truncateNpub(npub: string): string {
 
 function avatarClasses(purpose: string): string {
   switch (purpose) {
-    case 'business': return 'bg-blue-500/15 text-blue-400 border-blue-500/25'
-    case 'anonymous': return 'bg-purple-500/15 text-purple-400 border-purple-500/25'
-    default: return 'bg-white/10 text-white/80 border-white/20'
+    case 'business': return 'bg-blue-500/15 text-blue-400'
+    case 'anonymous': return 'bg-purple-500/15 text-purple-400'
+    default: return 'bg-white/10 text-white/80'
   }
 }
 </script>