fix: WebSocket race conditions, Vue error handler, remove sudo podman, add container health checks

- F1: Guard connectWebSocket against concurrent calls with isWsConnecting flag
- F2: Serialize mesh send operations with sendQueue to prevent fetchMessages races
- F3: Add global Vue error handler with toast notification
- S1: Replace sudo podman with podman across all scripts (rootless Podman)
- S2: Add health-cmd to all 40 container run commands in first-boot-containers.sh

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

scripts/deploy-tailscale.sh

@@ -97,13 +97,13 @@ deploy_node() {
     step "Checking for rootful containers (migration)"
     ssh $SSH_OPTS "$TARGET" '
         # Count rootful containers (run as sudo = rootful podman)
-        ROOTFUL=$(sudo podman ps -a --format "{{.Names}}" 2>/dev/null | grep -v "^$" | wc -l)
+        ROOTFUL=$(podman ps -a --format "{{.Names}}" 2>/dev/null | grep -v "^$" | wc -l)
         ROOTLESS=$(podman ps -a --format "{{.Names}}" 2>/dev/null | grep -v "^$" | wc -l)
         echo "   Rootful: $ROOTFUL containers, Rootless: $ROOTLESS containers"
         if [ "$ROOTFUL" -gt 0 ]; then
             echo "   MIGRATING: Stopping $ROOTFUL rootful containers..."
-            sudo podman stop --all --timeout 30 2>/dev/null || true
-            sudo podman rm --all --force 2>/dev/null || true
+            podman stop --all --timeout 30 2>/dev/null || true
+            podman rm --all --force 2>/dev/null || true
             echo "   Rootful containers removed (data preserved in /var/lib/archipelago/)"
         fi
     ' 2>&1