fix: systemd resource limits, Tor rotation transition, unwrap elimination, RPC timeouts

- I2: Add MemoryMax=4G, LimitNOFILE=65535, TasksMax=2048 to systemd service
- I3: Tor rotation keeps old service for 1h transition before cleanup
- R14: Replace .parse().unwrap() with .unwrap_or(localhost) in rate limiter
- R15: Replace 7 unwrap/expect in mesh protocol with proper error propagation
- R27: Add 10s timeouts to mesh Bitcoin RPC calls

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

image-recipe/configs/archipelago.service

@@ -42,6 +42,11 @@ SystemCallArchitectures=native
 # Memory protection
 MemoryDenyWriteExecute=yes
 
+# Resource limits
+MemoryMax=4G
+LimitNOFILE=65535
+TasksMax=2048
+
 # Logging
 StandardOutput=journal
 StandardError=journal