feat: botfights container app + mobile gamepad + indeedhub fixes

- Promote botfights from external proxy to container app (port 9100)
- Add /app/botfights/ nginx proxy rules (HTTP + HTTPS)
- Add ARCHY_EMBEDDED env var to botfights container config
- Add BOTFIGHTS_IMAGE to image-versions.sh
- Add mobile gamepad overlay (D-pad + A/B + START/SELECT) for botfights
  arcade mode, sends postMessage arcade-input to iframe
- Remove old /ext/botfights/ and port 8901 external proxy blocks
- IndeeHub: add post-install nginx patching for NIP-07 provider injection
- IndeeHub: fix docker image references to registry (was localhost)
- IndeeHub: update port 7777 -> 7778

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

core/archipelago/src/api/rpc/package/config.rs

@@ -877,6 +877,7 @@ pub(super) async fn get_app_config(
                     "PORT=9100".to_string(),
                     format!("JWT_SECRET={}", jwt_secret),
                     "FIGHT_LOOP_ENABLED=true".to_string(),
+                    "ARCHY_EMBEDDED=1".to_string(),
                 ],
                 None,
                 None,

core/archipelago/src/api/rpc/package/install.rs

@@ -897,6 +897,108 @@ autopilot.active=false\n",
             }
         }
 
+        // IndeeHub: inject nostr-provider.js and patch container nginx for NIP-07 signing
+        if package_id == "indeedhub" {
+            tokio::time::sleep(std::time::Duration::from_secs(5)).await;
+
+            // 1. Remove X-Frame-Options so iframe embedding works
+            let _ = tokio::process::Command::new("podman")
+                .args(["exec", "indeedhub", "sed", "-i", "/X-Frame-Options/d",
+                       "/etc/nginx/conf.d/default.conf"])
+                .output()
+                .await;
+
+            // 2. Copy nostr-provider.js into container
+            let provider_src = "/opt/archipelago/web-ui/nostr-provider.js";
+            if tokio::fs::metadata(provider_src).await.is_ok() {
+                let _ = tokio::process::Command::new("podman")
+                    .args(["cp", provider_src, "indeedhub:/usr/share/nginx/html/nostr-provider.js"])
+                    .output()
+                    .await;
+            }
+
+            // 3. Add nostr-provider.js location block + sub_filter injection
+            let check = tokio::process::Command::new("podman")
+                .args(["exec", "indeedhub", "grep", "-q", "nostr-provider",
+                       "/etc/nginx/conf.d/default.conf"])
+                .output()
+                .await;
+            let already_patched = check.map(|o| o.status.success()).unwrap_or(false);
+
+            if !already_patched {
+                // Read current nginx config from container
+                let cat_out = tokio::process::Command::new("podman")
+                    .args(["exec", "indeedhub", "cat", "/etc/nginx/conf.d/default.conf"])
+                    .output()
+                    .await;
+
+                if let Ok(out) = cat_out {
+                    if out.status.success() {
+                        let conf = String::from_utf8_lossy(&out.stdout).to_string();
+
+                        // Insert provider location block before the sw.js location
+                        let conf = conf.replace(
+                            "location = /sw.js {",
+                            "location = /nostr-provider.js {\n\
+                             \x20       add_header Cache-Control \"no-cache, no-store, must-revalidate\";\n\
+                             \x20       expires off;\n\
+                             \x20   }\n\n\
+                             \x20   location = /sw.js {"
+                        );
+
+                        // Inject script tag into HTML via sub_filter
+                        let conf = if conf.contains("try_files") && !conf.contains("sub_filter") {
+                            conf.replacen(
+                                "try_files $uri $uri/ /index.html;",
+                                "try_files $uri $uri/ /index.html;\n\
+                                 \x20       sub_filter_once on;\n\
+                                 \x20       sub_filter '</head>' '<script src=\"/nostr-provider.js\"></script></head>';",
+                                1,
+                            )
+                        } else {
+                            conf
+                        };
+
+                        // Write patched config back into container
+                        let tmp_path = "/tmp/indeedhub-nginx-patch.conf";
+                        if tokio::fs::write(tmp_path, &conf).await.is_ok() {
+                            let _ = tokio::process::Command::new("podman")
+                                .args(["cp", tmp_path, "indeedhub:/etc/nginx/conf.d/default.conf"])
+                                .output()
+                                .await;
+                            let _ = tokio::fs::remove_file(tmp_path).await;
+                        }
+                    }
+                }
+            }
+
+            // 4. Fix X-Forwarded-Prefix for NIP-98 URL reconstruction in iframe context
+            let _ = tokio::process::Command::new("podman")
+                .args(["exec", "indeedhub", "sed", "-i",
+                       "s|proxy_set_header X-Forwarded-Prefix /api;|proxy_set_header X-Forwarded-Prefix $http_x_forwarded_prefix/api;|",
+                       "/etc/nginx/conf.d/default.conf"])
+                .output()
+                .await;
+
+            // 5. Reload nginx to apply changes
+            let reload = tokio::process::Command::new("podman")
+                .args(["exec", "indeedhub", "nginx", "-s", "reload"])
+                .output()
+                .await;
+            match reload {
+                Ok(o) if o.status.success() => {
+                    info!("IndeeHub: NIP-07 provider injected, nginx patched and reloaded");
+                }
+                Ok(o) => {
+                    tracing::warn!("IndeeHub nginx reload failed: {}",
+                        String::from_utf8_lossy(&o.stderr));
+                }
+                Err(e) => {
+                    tracing::warn!("IndeeHub nginx reload error: {}", e);
+                }
+            }
+        }
+
         if package_id == "nextcloud" {
             let host_ip = &self.config.host_ip;
             // Wait for Nextcloud to finish first-run initialization