feat: v1.2.0-alpha — E2E encrypted mesh relay, steganography, relay status polling

Phase 5 mesh networking:
- E2E encrypted TX relay (X25519 + ChaCha20-Poly1305) — non-Archy nodes
  relay encrypted blobs transparently via Meshcore native routing
- Steganographic encoding modes (WeatherStation, SensorNetwork) — traffic
  looks like sensor data on the wire, 0xAA marker, configurable per-node
- Pre-flight Bitcoin Core health check on relay node — specific error codes
  (bitcoin_unreachable, bitcoin_syncing, tx_rejected) instead of generic fails
- mesh.relay-status RPC endpoint — frontend polls for relay result every 3s
- On-Chain / Lightning tabs in Off-Grid Bitcoin panel
- Archy Peers vs Mesh Broadcast relay mode selector
- Mesh view fills viewport (no page scroll), internal panel scrolling
- Version bump to 1.2.0-alpha

Also includes: deploy hardening, container fixes, IndeedHub updates,
boot screen, dashboard improvements, MASTER_PLAN task tracking

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

core/container/src/podman_client.rs

@@ -335,11 +335,14 @@ impl PodmanClient {
             .arg("-a")
             .arg("--format")
             .arg("json");
-        
-        let output = cmd
-            .output()
-            .await
-            .context("Failed to list containers")?;
+
+        let output = tokio::time::timeout(
+            std::time::Duration::from_secs(60),
+            cmd.output(),
+        )
+        .await
+        .map_err(|_| anyhow::anyhow!("podman ps timed out (60s)"))?
+        .context("Failed to list containers")?;
         
         if !output.status.success() {
             let stderr = String::from_utf8_lossy(&output.stderr);