feat: cloud native file browser, settings Claude auth, deploy hardening

- Add native Cloud file browser with FileBrowser API integration
- Add cloud store, filebrowser-client, useAudioPlayer, useFileType composables
- Add Cloud components: FileGrid, FileCard, FileCardGrid, CloudToolbar
- Add Claude authentication section to Settings with OAuth status check
- Harden deploy script to preserve /aiui/ and claude-login.html
- Add nginx proxies for btcpay, homeassistant, filebrowser (HTTPS block)
- Add app configs for filebrowser, searxng, penpot in package.rs
- Update goal progress tracking with app aliases
- Improve mobile back button composable with ResizeObserver
- Update various views with cloud integration and UI refinements

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

core/archipelago/src/api/rpc/package.rs

@@ -1,7 +1,7 @@
 use super::RpcHandler;
 use crate::port_allocator::PortAllocator;
 use anyhow::{Context, Result};
-use tracing::debug;
+use tracing::{debug, info};
 
 impl RpcHandler {
     /// Install a package from a Docker image
@@ -200,6 +200,28 @@ impl RpcHandler {
 
         let container_id = String::from_utf8_lossy(&run_output.stdout).trim().to_string();
 
+        // Post-install: Nextcloud needs trusted domains configured for iframe embedding
+        if package_id == "nextcloud" {
+            let host_ip = self.config.host_ip.clone();
+            tokio::spawn(async move {
+                // Wait for Nextcloud to finish first-run initialization
+                tokio::time::sleep(std::time::Duration::from_secs(30)).await;
+                for domain_idx in 1..=2u8 {
+                    let value = if domain_idx == 1 { host_ip.as_str() } else { "localhost" };
+                    let _ = tokio::process::Command::new("sudo")
+                        .args([
+                            "podman", "exec", "-u", "33", "nextcloud",
+                            "php", "occ", "config:system:set",
+                            "trusted_domains", &domain_idx.to_string(),
+                            "--value", value,
+                        ])
+                        .output()
+                        .await;
+                }
+                info!("Nextcloud trusted domains configured for {}", host_ip);
+            });
+        }
+
         Ok(serde_json::json!({
             "success": true,
             "package_id": package_id,