fix: BUILD_VERSION from Cargo.toml, kiosk scaling, new apps, Rust warnings

Critical:
- BUILD_VERSION was hardcoded as "1.3.0-alpha" — now reads from Cargo.toml
  This caused ALL ISOs to show v1.3.0 regardless of actual binary version

Kiosk:
- Remove --disable-gpu flags (broke display scaling on some monitors)
- Add --start-fullscreen --window-size for reliable fullscreen

New apps:
- Nostr VPN, FIPS, Routstr, noStrudel, BotFights, NWNN, 484 Kitchen,
  Call the Operator, Arch Presentation, Syntropy Institute, T-0

Rust: suppress dead_code and unused_assignments warnings

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

image-recipe/build-auto-installer-iso.sh

@@ -66,7 +66,8 @@ fi
 echo "$BUILD_NUM" | sudo tee "$BUILD_COUNTER_FILE" > /dev/null 2>/dev/null || BUILD_NUM=1
 GIT_SHORT=$(cd "$SCRIPT_DIR/.." && git rev-parse --short HEAD 2>/dev/null || echo "dev")
 # Version format: major.minor.patch-prerelease (semver)
-BUILD_VERSION="1.3.0-alpha"
+# Read version from Cargo.toml (single source of truth)
+BUILD_VERSION=$(grep '^version' "$SCRIPT_DIR/../core/archipelago/Cargo.toml" 2>/dev/null | head -1 | sed 's/version = "//;s/"//' || echo "0.0.0")
 echo "Build #${BUILD_NUM} (${BUILD_VERSION}, commit ${GIT_SHORT})"
 
 # Architecture-dependent variables

image-recipe/configs/archipelago-kiosk-launcher.sh

@@ -42,12 +42,12 @@ while true; do
       --disable-save-password-bubble \
       --disable-suggestions-service \
       --disable-component-update \
-      --disable-gpu \
-      --disable-gpu-compositing \
-      --disable-gpu-rasterization \
-      --disable-software-rasterizer \
-      --num-raster-threads=1 \
-      --renderer-process-limit=1 \
+      --enable-gpu-rasterization \
+      --num-raster-threads=2 \
+      --renderer-process-limit=2 \
+      --window-size=9999,9999 \
+      --window-position=0,0 \
+      --start-fullscreen \
       --disable-background-networking \
       --disable-background-timer-throttling \
       --disable-backgrounding-occluded-windows \

image-recipe/configs/nginx-archipelago.conf

@@ -514,6 +514,29 @@ server {
         default_type application/json;
         return 503 '{"error":{"code":"NO_WEB_UI","message":"Tailscale is managed via CLI"}}';
     }
+    location /app/routstr/ {
+        proxy_pass http://127.0.0.1:8200/;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_hide_header X-Frame-Options;
+        add_header X-Frame-Options "SAMEORIGIN" always;
+        proxy_hide_header Content-Security-Policy;
+        add_header X-Content-Type-Options "nosniff" always;
+        proxy_set_header Accept-Encoding "";
+        sub_filter_once on;
+        sub_filter '</head>' '<script src="/nostr-provider.js"></script></head>';
+    }
+    location /app/nostr-vpn/ {
+        default_type application/json;
+        return 503 '{"error":{"code":"NO_WEB_UI","message":"Nostr VPN is managed via CLI"}}';
+    }
+    location /app/fips/ {
+        default_type application/json;
+        return 503 '{"error":{"code":"NO_WEB_UI","message":"FIPS is managed via CLI"}}';
+    }
     location /app/ollama/ {
         proxy_pass http://127.0.0.1:11434/;
         proxy_http_version 1.1;

image-recipe/configs/snippets/archipelago-https-app-proxies.conf

@@ -197,6 +197,28 @@ location /app/tailscale/ {
     default_type application/json;
     return 503 '{"error":{"code":"NO_WEB_UI","message":"Tailscale is managed via CLI"}}';
 }
+location /app/routstr/ {
+    proxy_pass http://127.0.0.1:8200/;
+    proxy_http_version 1.1;
+    proxy_set_header Host $host;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_hide_header X-Frame-Options;
+    add_header X-Frame-Options "SAMEORIGIN" always;
+    proxy_hide_header Content-Security-Policy;
+    proxy_set_header Accept-Encoding "";
+    sub_filter_once on;
+    sub_filter '</head>' '<script src="/nostr-provider.js"></script></head>';
+}
+location /app/nostr-vpn/ {
+    default_type application/json;
+    return 503 '{"error":{"code":"NO_WEB_UI","message":"Nostr VPN is managed via CLI"}}';
+}
+location /app/fips/ {
+    default_type application/json;
+    return 503 '{"error":{"code":"NO_WEB_UI","message":"FIPS is managed via CLI"}}';
+}
 location /app/ollama/ {
     proxy_pass http://127.0.0.1:11434/;
     proxy_http_version 1.1;