feat: complete Phase 1 foundation hardening + three-mode UI design doc

Phase 1a — Gradient Removal:
- Replaced all gradient-button/gradient-card with glass-button/path-option-card
- Removed banned gradient CSS classes

Phase 1b — Security Hardening:
- SecretsManager: AES-256-GCM encryption (core/security)
- electrs_status: credentials from env vars instead of hardcoded
- port_manager: RwLock proper error handling (no unwrap)
- Pinned all 11 :latest manifest images to specific versions
- parmanode converter: pinned inferred image versions

Phase 1c — Code Quality:
- Split rpc.rs (1795 lines) into 6 handler modules (auth, node, container, package, peers)
- Removed sideload code (UI, store, RPC client, 3 doc files)
- Fixed body background flash on logout/refresh
- Replaced 30 TypeScript `any` types with proper types
- Deleted HelloWorld.vue, removed TODO comments
- Added set -euo pipefail to all shell scripts
- Made deploy script verbose with timestamps and elapsed time

Also adds:
- CLAUDE.md project guide
- docs/three-mode-ui-design.md — design spec for Easy/Pro/Chat UI modes
- OnlineStatusPill component

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

core/archipelago/src/container/dev_orchestrator.rs

@@ -189,7 +189,7 @@ impl DevContainerOrchestrator {
             .context("Failed to get container status")?;
 
         // Add dev port information
-        if let Some(ports) = self.port_manager.get_port_mapping(app_id) {
+        if let Ok(Some(ports)) = self.port_manager.get_port_mapping(app_id) {
             status.ports = ports.iter().map(|p| p.to_string()).collect();
         }
 
@@ -211,7 +211,7 @@ impl DevContainerOrchestrator {
                 // Extract app_id from container name
                 if let Some(app_id) = container.name.strip_prefix("archipelago-") {
                     if let Some(app_id) = app_id.strip_suffix("-dev") {
-                        if let Some(ports) = self.port_manager.get_port_mapping(app_id) {
+                        if let Ok(Some(ports)) = self.port_manager.get_port_mapping(app_id) {
                             let mut container_with_ports = container.clone();
                             container_with_ports.ports = ports.iter().map(|p| p.to_string()).collect();
                             result.push(container_with_ports);
@@ -251,7 +251,7 @@ impl DevContainerOrchestrator {
     /// Get port mapping for an app
     #[allow(dead_code)]
     pub fn get_port_mapping(&self, app_id: &str) -> Option<Vec<u16>> {
-        self.port_manager.get_port_mapping(app_id)
+        self.port_manager.get_port_mapping(app_id).ok().flatten()
     }
 
     /// Get Bitcoin simulator