fix: v1.3.3 — firmware, fedimint perms, GRUB fallback, data dirs, Rust warnings

- Add firmware-linux-nonfree to ISO (fixes missing Realtek NIC firmware)
- Pre-create nbxplorer/Main and btcpay/Main data directories
- Fix fedimint data dir permissions (chmod 775 for non-root container)
- GRUB GFX fallback: gfxpayload=keep + console fallback for incompatible hardware
- Kill stale Chromium before kiosk restart (prevents duplicate processes)
- Suppress Rust warnings: #[allow(dead_code)] on run_boot_reconciliation,
  #[allow(unused_assignments)] on history_dirty
- Version bump to 1.3.3

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

image-recipe/build-auto-installer-iso.sh

@@ -289,6 +289,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     firmware-realtek \
     firmware-iwlwifi \
     firmware-misc-nonfree \
+    firmware-linux-nonfree \
     intel-microcode \
     amd64-microcode \
     xorg \
@@ -2477,6 +2478,10 @@ rm -f /mnt/target/usr/share/initramfs-tools/hooks/live* 2>/dev/null || true
 
 # Suppress os-prober warning in GRUB
 echo "GRUB_DISABLE_OS_PROBER=true" >> /mnt/target/etc/default/grub
+# GFX fallback for hardware without graphical GRUB support
+echo 'GRUB_GFXMODE=auto' >> /mnt/target/etc/default/grub
+echo 'GRUB_GFXPAYLOAD_LINUX=keep' >> /mnt/target/etc/default/grub
+echo 'GRUB_TERMINAL_OUTPUT=gfxterm' >> /mnt/target/etc/default/grub
 
 # Install Archipelago GRUB theme on target system
 if [ -d "$BOOT_MEDIA/boot/grub/themes/archipelago" ]; then
@@ -2947,12 +2952,15 @@ fi
 set timeout=5
 set default=0
 
-# Load font for graphical menu
+# Load font for graphical menu — fallback to text mode on hardware without gfxterm
 if loadfont ($root)/boot/grub/font.pf2; then
     set gfxmode=auto
+    set gfxpayload=keep
     insmod gfxterm
     insmod png
     terminal_output gfxterm
+else
+    terminal_output console
 fi
 
 # Archipelago GRUB theme

image-recipe/configs/archipelago-kiosk-launcher.sh

@@ -24,6 +24,10 @@ xset s noblank 2>/dev/null
 # Hide cursor
 unclutter -idle 3 -root &
 
+# Kill any stale Chromium instances before starting
+pkill -u archipelago -f 'chromium.*kiosk' 2>/dev/null
+sleep 1
+
 # Run Chromium as archipelago user in a restart loop
 while true; do
     sudo -u archipelago env DISPLAY=:0 HOME=/home/archipelago chromium --kiosk \