fix: deploy script credential injection + container state mapping

- Bitcoin UI nginx: use __BITCOIN_RPC_AUTH__ placeholder, injected at
  deploy time from secrets file (fixes auth prompt regression)
- Deploy script: sed-replaces placeholder with real base64 RPC creds
  before building bitcoin-ui Docker image
- Container state: "created" → "stopped" (not "starting") so ollama/
  tailscale show correctly
- Comprehensive INSTALLED_ALIASES for marketplace

All container credentials now flow from secrets files through the
deploy script. Manual container recreation is no longer needed.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

scripts/deploy-to-target.sh

@@ -800,6 +800,15 @@ MANIFEST_EOF
     # Rebuild and recreate Bitcoin UI container (host network, port 8334 in nginx.conf)
     # Host network required: bitcoin-ui proxies Bitcoin RPC at 127.0.0.1:8332
     progress "Rebuilding Bitcoin UI"
+    # Inject real RPC credentials into bitcoin-ui nginx config before building
+    ssh $SSH_OPTS "$TARGET_HOST" '
+      SECRETS_DIR="/var/lib/archipelago/secrets"
+      RPC_PASS=$(sudo cat "$SECRETS_DIR/bitcoin-rpc-password" 2>/dev/null)
+      if [ -n "$RPC_PASS" ]; then
+        AUTH_B64=$(echo -n "archipelago:${RPC_PASS}" | base64)
+        sed -i "s|__BITCOIN_RPC_AUTH__|${AUTH_B64}|g" '"$TARGET_DIR"'/docker/bitcoin-ui/nginx.conf
+      fi
+    ' 2>/dev/null || true
     if ssh $SSH_OPTS "$TARGET_HOST" "cd $TARGET_DIR/docker/bitcoin-ui && (command -v podman >/dev/null 2>&1 && podman build --no-cache -t bitcoin-ui:latest . || docker build --no-cache -t bitcoin-ui:latest .)" 2>&1 | tail -12 | sed 's/^/   /'; then
         echo "   Recreating Bitcoin UI container (port 8334, host network)..."
         ssh $SSH_OPTS "$TARGET_HOST" '