fix: ElectrumX sync detection + rootless podman infrastructure

- ElectrumX status: detect "Connection reset" as syncing (not error)
  by using case-insensitive check on connect/reset/refused
- Deploy script: auto-configure rootless podman prerequisites
  (sysctl unprivileged ports >= 80, loginctl linger, podman socket)
- Marketplace: sort installed apps to bottom of list

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

core/archipelago/src/electrs_status.rs

@@ -174,7 +174,8 @@ pub async fn get_electrs_sync_status() -> ElectrsSyncStatus {
         Ok(Err(e)) => {
             // ElectrumX may not be ready on 50001 during initial sync
             let err_msg = e.to_string();
-            let (status, error) = if err_msg.contains("connect") || err_msg.contains("Connection refused") {
+            let err_lower = err_msg.to_lowercase();
+            let (status, error) = if err_lower.contains("connect") || err_lower.contains("reset") || err_lower.contains("refused") {
                 // Estimate progress from data directory size
                 let _est_pct = if data_bytes > 0 {
                     ((data_bytes as f64 / ESTIMATED_FULL_INDEX_BYTES) * 100.0).min(99.0)