fix: align image-versions.sh with registry, PATH for reboot

- image-versions.sh: fix 15+ tag mismatches against actual registry
  (bitcoin-knots:28.1→latest, lnd:v0.18.5→v0.18.4, grafana:11.4→10.2,
  vaultwarden:1.32.5→1.30.0-alpine, nextcloud:29→28, etc.)
- .bashrc: add /sbin:/usr/sbin to PATH so reboot/shutdown work
- Tailscale: add Arch Atob node (100.113.33.31)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

image-recipe/build-auto-installer-iso.sh

@@ -1904,6 +1904,12 @@ fi
 PROFILE
 chmod +x /mnt/target/etc/profile.d/archipelago.sh
 
+# Ensure reboot/shutdown work without sudo for the archipelago user
+# profile.d only runs for login shells; .bashrc handles SSH interactive sessions
+if ! grep -q '/sbin' /mnt/target/home/archipelago/.bashrc 2>/dev/null; then
+    echo 'export PATH="$PATH:/sbin:/usr/sbin"' >> /mnt/target/home/archipelago/.bashrc
+fi
+
 # Systemd service: use the production version from rootfs (configs/archipelago.service)
 # Do NOT overwrite — the rootfs already has the correct User=archipelago, no DEV_MODE version
 if [ ! -f /mnt/target/etc/systemd/system/archipelago.service ]; then