feat: botfights container app + mobile gamepad + indeedhub fixes

- Promote botfights from external proxy to container app (port 9100)
- Add /app/botfights/ nginx proxy rules (HTTP + HTTPS)
- Add ARCHY_EMBEDDED env var to botfights container config
- Add BOTFIGHTS_IMAGE to image-versions.sh
- Add mobile gamepad overlay (D-pad + A/B + START/SELECT) for botfights
  arcade mode, sends postMessage arcade-input to iframe
- Remove old /ext/botfights/ and port 8901 external proxy blocks
- IndeeHub: add post-install nginx patching for NIP-07 provider injection
- IndeeHub: fix docker image references to registry (was localhost)
- IndeeHub: update port 7777 -> 7778

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

image-recipe/configs/external-app-proxies.conf

@@ -5,34 +5,6 @@
 resolver 1.1.1.1 8.8.8.8 valid=300s;
 resolver_timeout 5s;
 
-# BotFights (botfights.net) → port 8901
-server {
-    listen 8901;
-    server_name _;
-
-    location / {
-        set $upstream_botfights https://botfights.net;
-        proxy_pass $upstream_botfights;
-        proxy_http_version 1.1;
-        proxy_set_header Host botfights.net;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        proxy_set_header Accept-Encoding "";
-        proxy_ssl_server_name on;
-        proxy_ssl_name botfights.net;
-        proxy_hide_header X-Frame-Options;
-        add_header X-Frame-Options "SAMEORIGIN" always;
-        proxy_hide_header Content-Security-Policy;
-        proxy_connect_timeout 60s;
-        proxy_read_timeout 60s;
-
-        proxy_redirect https://botfights.net/ /;
-        sub_filter_once off;
-        sub_filter_types text/html text/css application/javascript;
-    }
-}
-
 # 484 Kitchen (484.kitchen) → port 8902
 server {
     listen 8902;