fix: v1.3.3 — firmware, fedimint perms, GRUB fallback, data dirs, Rust warnings

- Add firmware-linux-nonfree to ISO (fixes missing Realtek NIC firmware)
- Pre-create nbxplorer/Main and btcpay/Main data directories
- Fix fedimint data dir permissions (chmod 775 for non-root container)
- GRUB GFX fallback: gfxpayload=keep + console fallback for incompatible hardware
- Kill stale Chromium before kiosk restart (prevents duplicate processes)
- Suppress Rust warnings: #[allow(dead_code)] on run_boot_reconciliation,
  #[allow(unused_assignments)] on history_dirty
- Version bump to 1.3.3

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

core/archipelago/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "archipelago"
-version = "1.3.2"
+version = "1.3.3"
 edition = "2021"
 description = "Archipelago Bitcoin Node OS - Native backend"
 authors = ["Archipelago Team"]

core/archipelago/src/crash_recovery.rs

@@ -409,6 +409,7 @@ fn container_boot_tier(name: &str) -> u8 {
 
 /// Run the reconciliation script after boot to fix any config drift.
 /// Ensures all containers match their canonical specs from container-specs.sh.
+#[allow(dead_code)]
 pub async fn run_boot_reconciliation() {
     let script = "/home/archipelago/archy/scripts/reconcile-containers.sh";
     if !std::path::Path::new(script).exists() {

core/archipelago/src/health_monitor.rs

@@ -491,6 +491,7 @@ pub fn spawn_health_monitor(state: Arc<StateManager>, data_dir: PathBuf) {
         // Load persistent restart history and seed the in-memory tracker
         let mut restart_history = RestartHistory::load(&data_dir).await;
         restart_history.seed_tracker(&mut tracker);
+        #[allow(unused_assignments)]
         let mut history_dirty = false;
 
         loop {