fix: alpha release hardening — onboarding, security, and ISO build

- Convert "Choose Your Path" screen to informative (read-only cards)
- Harden "Choose Your Setup" (gray out Coming Soon options, auto-select Fresh Start)
- Auto-fetch DID on mount with retry and auto-advance after success
- Improve backup download for mobile compatibility
- Add retry logic to verify step with graceful skip option
- Route verify → done → login for complete onboarding flow
- Add AIUI install confirmation via custom event (SEC-001)
- Add file path whitelist for AIUI file access (SEC-002)
- Add log redaction for container logs sent to AIUI (SEC-003)
- Add Secure flag to session cookie in production (SEC-004)
- Fix ISO build script to handle zstd compression errors gracefully
- Sync archipelago.service from live server

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

neode-ui/src/views/OnboardingOptions.vue

@@ -3,9 +3,9 @@
     <div class="max-w-6xl w-full overflow-x-hidden">
       <div class="text-center mb-8">
         <div class="logo-gradient-border inline-block mb-8">
-          <img 
-            src="/assets/icon/favico-black-v2.svg" 
-            alt="Archipelago" 
+          <img
+            src="/assets/icon/favico-black-v2.svg"
+            alt="Archipelago"
             class="w-20 h-20"
           />
         </div>
@@ -33,11 +33,9 @@
           </p>
         </button>
 
-        <!-- Restore Backup -->
-        <button
-          @click="selectOption('restore')"
-          class="glass-card p-8 text-center transition-all hover:-translate-y-1 hover:shadow-glass"
-          :class="{ 'bg-white/12 shadow-[0_12px_32px_rgba(0,0,0,0.6),0_0_30px_rgba(255,255,255,0.2)]': selected === 'restore' }"
+        <!-- Restore Backup (Coming Soon) -->
+        <div
+          class="glass-card p-8 text-center opacity-40 cursor-not-allowed"
         >
           <div class="mb-6">
             <div class="w-16 h-16 mx-auto bg-white/10 rounded-full flex items-center justify-center">
@@ -50,13 +48,12 @@
           <p class="text-white/70 text-sm">
             Restore from a previous backup
           </p>
-        </button>
+          <span class="text-xs text-white/50 mt-2 block">(Coming Soon)</span>
+        </div>
 
-        <!-- Connect Existing -->
-        <button
-          @click="selectOption('connect')"
-          class="glass-card p-8 text-center transition-all hover:-translate-y-1 hover:shadow-glass"
-          :class="{ 'bg-white/12 shadow-[0_12px_32px_rgba(0,0,0,0.6),0_0_30px_rgba(255,255,255,0.2)]': selected === 'connect' }"
+        <!-- Connect Existing (Coming Soon) -->
+        <div
+          class="glass-card p-8 text-center opacity-40 cursor-not-allowed"
         >
           <div class="mb-6">
             <div class="w-16 h-16 mx-auto bg-white/10 rounded-full flex items-center justify-center">
@@ -69,14 +66,14 @@
           <p class="text-white/70 text-sm">
             Connect to an existing Archipelago server
           </p>
-        </button>
+          <span class="text-xs text-white/50 mt-2 block">(Coming Soon)</span>
+        </div>
       </div>
 
       <div class="mt-12 text-center">
         <button
           @click="proceed"
-          :disabled="!selected"
-          class="glass-button px-8 py-4 rounded-lg text-lg font-medium transition-all hover:bg-black/70 hover:border-white/30 disabled:opacity-50 disabled:cursor-not-allowed"
+          class="glass-button px-8 py-4 rounded-lg text-lg font-medium transition-all hover:bg-black/70 hover:border-white/30"
         >
           Continue →
         </button>
@@ -86,26 +83,27 @@
 </template>
 
 <script setup lang="ts">
-import { ref } from 'vue'
+import { ref, onMounted } from 'vue'
 import { useRouter } from 'vue-router'
 import { completeOnboarding } from '@/composables/useOnboarding'
 
 const router = useRouter()
 const selected = ref<string | null>(null)
 
+onMounted(() => {
+  selected.value = 'fresh'
+})
+
 function selectOption(option: string) {
   selected.value = option
 }
 
 async function proceed() {
-  if (selected.value) {
-    try {
-      await completeOnboarding()
-    } catch {
-      /* localStorage fallback ensures onboarding is marked complete */
-    }
-    router.push('/login').catch(() => {})
+  try {
+    await completeOnboarding()
+  } catch {
+    // localStorage fallback in completeOnboarding ensures onboarding is marked complete
   }
+  router.push('/login').catch(() => {})
 }
 </script>
-