release(v1.7.38-alpha): onboarding auto-heal + silent returning logins + app-store trim

- auth.rs now infers onboarding-complete from setup_complete + password_hash so
  nodes stop bouncing users through the intro wizard after browser clear / update
  / reboot; the flag self-heals to disk on next check
- frontend: "backend uncertain" no longer defaults to /onboarding/intro —
  useOnboarding returns null + callers poll / retry instead of flashing the wizard
- login sounds (synthwave, welcome voice, pop, whoosh, oomph) gated by
  isFirstInstallPhase(); typing sounds unaffected
- removed FIPS app, Nostr Relay, Nostr VPN, Routstr, Penpot from catalog,
  frontend config, Rust AppMetadata + install dispatch + install_penpot_stack;
  docker/fips-ui + docker/nostr-vpn-ui + apps/penpot dirs and 5 icons deleted;
  15 image versions deleted from tx1138, .168, gitea-local registries (.160
  Gitea was 502 at release time — follow-up)
- AIUI baked into frontend release tarball via demo/aiui/; deploy-to-target
  falls back to demo/aiui/ when the AIUI sibling checkout is missing
- prebuild hook syncs app-catalog/catalog.json → public/catalog.json so the
  two copies can no longer drift (was the source of the "apps still visible"
  bug — public/ had stale data)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

neode-ui/src/utils/dummyApps.ts

@@ -474,42 +474,6 @@ export const dummyApps: Record<string, PackageDataEntry> = {
       status: ServiceStatus.Running
     }
   },
-  'penpot': {
-    state: PackageState.Running,
-    'static-files': {
-      license: 'MPL-2.0',
-      instructions: 'Design and prototyping platform',
-      icon: '/assets/img/penpot.webp'
-    },
-    manifest: {
-      id: 'penpot',
-      title: 'Penpot',
-      version: '2.0.0',
-      description: {
-        short: 'Open-source design and prototyping platform',
-        long: 'Penpot is an open-source design and prototyping platform for teams. Create designs, prototypes, and collaborate in real-time. Self-hosted alternative to Figma.'
-      },
-      'release-notes': 'Initial release',
-      license: 'MPL-2.0',
-      'wrapper-repo': 'https://github.com/penpot/penpot',
-      'upstream-repo': 'https://github.com/penpot/penpot',
-      'support-site': 'https://github.com/penpot/penpot/issues',
-      'marketing-site': 'https://penpot.app',
-      'donation-url': null
-    },
-    installed: {
-      'current-dependents': {},
-      'current-dependencies': {},
-      'last-backup': null,
-      'interface-addresses': {
-        main: {
-          'tor-address': 'penpot.onion',
-          'lan-address': 'http://localhost:9001'
-        }
-      },
-      status: ServiceStatus.Running
-    }
-  },
   'indeedhub': {
     state: PackageState.Running,
     'static-files': {