fix: container security hardening, onboarding viewport scaling, boot screen cleanup

Container security:
- Add --cap-drop ALL + --security-opt no-new-privileges:true to 12 containers
  missing hardening in first-boot-containers.sh (mempool-db, electrumx,
  mempool-api, mempool-web, electrs-ui, btcpay-db, nbxplorer, nostr-rs-relay,
  strfry, tailscale, bitcoin-ui, lnd-ui)
- Mirror same hardening in deploy-to-target.sh for consistency
- Add --read-only + tmpfs to nostr-rs-relay
- Fix filebrowser deploy to include security flags
- Remove duplicate UI image definitions in image-versions.sh
- Separate Jellyfin capabilities (needs FOWNER, exec tmpfs for CoreCLR JIT)
- Harden archy-net creation with existence check and error handling

UI fixes:
- Fix onboarding viewport scaling: all 7 screens now use h-full + max-h-full
  pattern so containers never overflow viewport regardless of padding
- Remove path-option-card wrappers from seed verify inputs, left-justify labels
- Remove batteries/barbarian icons from boot screen (keep bitcoin, cloud, github, save)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

neode-ui/src/components/BootScreen.vue

@@ -81,8 +81,6 @@ const iconSources = [
   '/assets/icon/cloud-done.svg',
   '/assets/icon/github.svg',
   '/assets/icon/save.svg',
-  '/assets/icon/batteries.svg',
-  '/assets/icon/barbarian.svg',
 ]
 
 interface LogLine { prefix: string; text: string; type: string }

neode-ui/src/views/OnboardingDone.vue

@@ -1,9 +1,9 @@
 <template>
-  <div class="min-h-full flex items-center justify-center p-3 sm:p-4 md:p-6">
+  <div class="h-full flex items-center justify-center p-3 sm:p-4 md:p-6">
     <!-- Main Glass Container - Scrollable -->
-    <div class="max-w-[800px] w-full relative z-10 path-glass-container onb-scroll-container">
+    <div class="max-w-[800px] w-full max-h-full relative z-10 path-glass-container onb-scroll-container flex flex-col">
       <!-- Success Content -->
-      <div class="text-center space-y-4 sm:space-y-6 px-3 sm:px-4 py-4 sm:py-6">
+      <div class="flex-1 overflow-y-auto overflow-x-hidden min-h-0 text-center space-y-4 sm:space-y-6 px-3 sm:px-4 py-4 sm:py-6">
         <!-- Success Icon -->
         <div class="flex justify-center mb-4 sm:mb-6">
           <div class="path-option-card cursor-default w-16 h-16 sm:w-20 sm:h-20 rounded-full flex items-center justify-center">

neode-ui/src/views/OnboardingIdentity.vue

@@ -1,6 +1,6 @@
 <template>
-  <div class="min-h-full flex items-center justify-center p-3 sm:p-4 md:p-6">
-    <div class="max-w-[800px] w-full relative z-10 path-glass-container onb-scroll-container">
+  <div class="h-full flex items-center justify-center p-3 sm:p-4 md:p-6">
+    <div class="max-w-[800px] w-full max-h-full relative z-10 path-glass-container onb-scroll-container flex flex-col">
       <!-- Header -->
       <div class="text-center flex-shrink-0 px-3 sm:px-4 pt-4 sm:pt-6">
         <h1 class="text-xl sm:text-2xl md:text-[26px] font-semibold text-white/96 mb-2 sm:mb-4 drop-shadow-[0_2px_6px_rgba(0,0,0,0.4)]">
@@ -11,7 +11,8 @@
         </p>
       </div>
 
-      <!-- Content -->
+      <!-- Scrollable Content -->
+      <div class="flex-1 overflow-y-auto overflow-x-hidden min-h-0">
       <div class="flex flex-col items-center gap-4 sm:gap-6 mb-4 sm:mb-6 px-3 sm:px-4">
         <div class="w-full max-w-[600px] space-y-4 sm:space-y-6">
           <!-- Name Input -->
@@ -59,9 +60,10 @@
         <p class="text-orange-400/80 text-sm">Server is still starting up. Your identity will be saved once it's ready.</p>
       </div>
       <p v-else-if="errorMessage" class="text-red-400 text-sm text-center mb-4">{{ errorMessage }}</p>
+      </div>
 
       <!-- Action Buttons -->
-      <div class="flex justify-center max-w-[600px] mx-auto flex-shrink-0 px-3 sm:px-4 pb-4 sm:pb-6">
+      <div class="flex justify-center max-w-[600px] mx-auto flex-shrink-0 px-3 sm:px-4 pb-4 sm:pb-6 pt-3">
         <button
           @click="createIdentity"
           :disabled="isCreating"

neode-ui/src/views/OnboardingOptions.vue

@@ -1,6 +1,7 @@
 <template>
-  <div class="min-h-full flex items-center justify-center p-3 sm:p-4 md:p-6">
-    <div class="max-w-[1200px] w-full relative z-10 path-glass-container onb-scroll-container">
+  <div class="h-full flex items-center justify-center p-3 sm:p-4 md:p-6">
+    <div class="max-w-[1200px] w-full max-h-full relative z-10 path-glass-container onb-scroll-container flex flex-col">
+      <div class="flex-1 overflow-y-auto overflow-x-hidden min-h-0">
       <div class="text-center mb-4 sm:mb-6 flex-shrink-0 px-3 sm:px-4 pt-4 sm:pt-6">
         <div class="logo-gradient-border inline-block mb-4 sm:mb-6">
           <img
@@ -68,8 +69,9 @@
           <span class="text-xs text-white/50 mt-1 block">(Coming Soon)</span>
         </div>
       </div>
+      </div>
 
-      <div class="flex justify-center flex-shrink-0 px-3 sm:px-4 pb-4 sm:pb-6 mt-4 sm:mt-8">
+      <div class="flex justify-center flex-shrink-0 px-3 sm:px-4 pb-4 sm:pb-6 pt-4 sm:pt-6">
         <button
           @click="proceed"
           class="path-action-button path-action-button--continue"

neode-ui/src/views/OnboardingPath.vue

@@ -1,7 +1,9 @@
 <template>
-  <div class="min-h-full flex items-center justify-center p-3 sm:p-4 md:p-6 relative">
+  <div class="h-full flex items-center justify-center p-3 sm:p-4 md:p-6 relative">
     <!-- Main Glass Container - Scrollable -->
-    <div class="max-w-[1200px] w-full relative z-10 path-glass-container onb-scroll-container">
+    <div class="max-w-[1200px] w-full max-h-full relative z-10 path-glass-container onb-scroll-container flex flex-col">
+      <!-- Scrollable Content -->
+      <div class="flex-1 overflow-y-auto overflow-x-hidden min-h-0">
       <!-- Header -->
       <div class="text-center mb-4 md:mb-6 flex-shrink-0 px-3 sm:px-4 pt-4 sm:pt-6">
         <h1 class="text-xl md:text-[26px] font-semibold text-white/96 mb-2 drop-shadow-[0_2px_6px_rgba(0,0,0,0.4)]">Your Node, Your Possibilities</h1>
@@ -78,9 +80,10 @@
           </p>
         </div>
       </div>
+      </div>
 
       <!-- Action Buttons -->
-      <div class="flex justify-center max-w-[600px] mx-auto flex-shrink-0 px-3 sm:px-4 pb-4 sm:pb-6">
+      <div class="flex justify-center max-w-[600px] mx-auto flex-shrink-0 px-3 sm:px-4 pb-4 sm:pb-6 pt-4 sm:pt-6">
         <button
           ref="continueButton"
           @click="proceed"

neode-ui/src/views/OnboardingSeedGenerate.vue

@@ -1,6 +1,6 @@
 <template>
-  <div class="min-h-full flex items-center justify-center p-3 sm:p-4 md:p-6">
-    <div class="max-w-[800px] w-full relative z-10 path-glass-container onb-scroll-container flex flex-col" style="max-height: calc(100dvh - 2rem);">
+  <div class="h-full flex items-center justify-center p-3 sm:p-4 md:p-6">
+    <div class="max-w-[800px] w-full max-h-full relative z-10 path-glass-container onb-scroll-container flex flex-col">
       <!-- Header -->
       <div class="text-center flex-shrink-0 px-3 sm:px-4 pt-4 sm:pt-6 pb-2 sm:pb-3">
         <h1 class="text-xl sm:text-2xl md:text-[26px] font-semibold text-white/96 mb-1.5 drop-shadow-[0_2px_6px_rgba(0,0,0,0.4)]">

neode-ui/src/views/OnboardingSeedRestore.vue

@@ -1,6 +1,6 @@
 <template>
-  <div class="min-h-full flex items-center justify-center p-3 sm:p-4 md:p-6">
-    <div class="max-w-[800px] w-full relative z-10 path-glass-container onb-scroll-container flex flex-col" style="max-height: calc(100dvh - 2rem);">
+  <div class="h-full flex items-center justify-center p-3 sm:p-4 md:p-6">
+    <div class="max-w-[800px] w-full max-h-full relative z-10 path-glass-container onb-scroll-container flex flex-col">
       <!-- Header -->
       <div class="text-center flex-shrink-0 px-3 sm:px-4 pt-4 sm:pt-6 pb-2 sm:pb-3">
         <h1 class="text-xl sm:text-2xl md:text-[26px] font-semibold text-white/96 mb-1.5 drop-shadow-[0_2px_6px_rgba(0,0,0,0.4)]">

neode-ui/src/views/OnboardingSeedVerify.vue

@@ -1,6 +1,6 @@
 <template>
-  <div class="min-h-full flex items-center justify-center p-3 sm:p-4 md:p-6">
-    <div class="max-w-[800px] w-full relative z-10 path-glass-container onb-scroll-container flex flex-col" style="max-height: calc(100dvh - 2rem);">
+  <div class="h-full flex items-center justify-center p-3 sm:p-4 md:p-6">
+    <div class="max-w-[800px] w-full max-h-full relative z-10 path-glass-container onb-scroll-container flex flex-col">
       <!-- Header (hidden after verification) -->
       <div v-if="!verified" class="text-center flex-shrink-0 px-3 sm:px-4 pt-4 sm:pt-6 pb-2 sm:pb-3">
         <h1 class="text-xl sm:text-2xl md:text-[26px] font-semibold text-white/96 mb-1.5 drop-shadow-[0_2px_6px_rgba(0,0,0,0.4)]">
@@ -66,13 +66,12 @@
           </div>
 
           <!-- Word Input Fields -->
-          <div v-if="!verified" class="w-full max-w-[600px] space-y-2 sm:space-y-3">
+          <div v-if="!verified" class="w-full max-w-[600px] space-y-3 sm:space-y-4">
             <div
               v-for="(idx, i) in challengeIndices"
               :key="idx"
-              class="path-option-card cursor-default px-3 py-3 sm:px-5 sm:py-4"
             >
-              <label class="block text-xs font-semibold text-white/80 mb-1.5 sm:mb-2 uppercase tracking-wide">
+              <label class="block text-xs font-semibold text-white/80 mb-1.5 uppercase tracking-wide text-left">
                 Word #{{ idx + 1 }}
               </label>
               <input