fix: UI sidecar containers need --user 0:0 and CHOWN caps for rootless podman

The backend's post-install hooks create archy-bitcoin-ui, archy-lnd-ui,
archy-electrs-ui containers but with only NET_BIND_SERVICE cap. Nginx
inside these containers crashes on chown in rootless podman.

Added --user=0:0, CHOWN, DAC_OVERRIDE, SETUID, SETGID caps to match
the first-boot-containers.sh pattern. Also fixed manifest publish
Python error (git log fails in rsync'd workspace with no .git).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.gitea/workflows/build-iso-dev.yml

@@ -198,19 +198,13 @@ jobs:
           HOST=$(hostname -I 2>/dev/null | awk '{print $1}')
           BASE_URL="http://${HOST:-192.168.1.228}:8083/Builds/releases/v${VERSION}"
 
-          # Get changelog from recent commits
-          CHANGELOG=$(git log --oneline -10 --format='%s' | python3 -c "
-          import sys, json
-          lines = [l.strip() for l in sys.stdin if l.strip()]
-          print(json.dumps(lines[:10]))
-          " 2>/dev/null || echo '["Update to version '"$VERSION"'"]')
-
+          # Generate manifest JSON
           python3 -c "
           import json
           manifest = {
               'version': '$VERSION',
               'release_date': '$DATE',
-              'changelog': $CHANGELOG,
+              'changelog': ['Update to version $VERSION'],
               'components': []
           }
           if '$BACKEND_HASH':
@@ -220,7 +214,7 @@ jobs:
                   'new_version': '$VERSION',
                   'download_url': '$BASE_URL/archipelago',
                   'sha256': '$BACKEND_HASH',
-                  'size_bytes': $BACKEND_SIZE
+                  'size_bytes': int('$BACKEND_SIZE' or '0')
               })
           if '$FRONTEND_HASH':
               manifest['components'].append({
@@ -229,7 +223,7 @@ jobs:
                   'new_version': '$VERSION',
                   'download_url': '$BASE_URL/$FRONTEND_NAME',
                   'sha256': '$FRONTEND_HASH',
-                  'size_bytes': $FRONTEND_SIZE
+                  'size_bytes': int('$FRONTEND_SIZE' or '0')
               })
           print(json.dumps(manifest, indent=2))
           " | sudo tee "$RELEASE_DIR/manifest.json" > /dev/null