fix: container install flow, filebrowser auth, AppCard enrichment

- Fix .198-style fresh installs: systemd service ExecStartPre creates
  /run/user/1000, enable podman.socket, chmod 644 /etc/hosts
- Filebrowser: add /data volume for database (fixes read-only crash),
  secure auth with random password via backend RPC (no more admin/admin)
- AppCard: enrich installing state with marketplace metadata (icon,
  title, description, tier badge, author, version)
- Registry: btcpayserver 1.13.5 → 1.13.7, images mirrored
- ReadWritePaths: add home container paths for rootless podman

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

image-recipe/build-auto-installer-iso.sh

@@ -1324,6 +1324,7 @@ cat > /mnt/target/etc/hosts <<EOF
 127.0.1.1   archipelago
 ::1         localhost ip6-localhost ip6-loopback
 EOF
+chmod 644 /mnt/target/etc/hosts
 
 # Configure Archipelago app registry (HTTP, insecure)
 mkdir -p /mnt/target/home/archipelago/.config/containers