fix: RC feedback round 2 — kiosk staleness, LND icon+retry, mesh detection surfacing

Kiosk (backgrounds + FIPS mismatch, one root cause each):
- kiosk service now also waits for the web-ui asset swap (probes a large
  bg asset, bounded 60s) — it launched mid-rsync and CSS background 404s
  are never refetched, hence blank backgrounds on first boot
- FipsNetworkCard polls every 15s instead of fetching once on mount
- PWA updates auto-apply on the kiosk (localStorage kiosk flag) — an
  unattended kiosk could never click 'Update Now' and ran stale bundles

LND App Store:
- catalog icon pointed at lnd.svg which doesn't exist (lnd.png does);
  store card also retries the sibling extension before the placeholder
- image pulls retry once after fast transient failures (<30s) — fresh
  first-boot networks reset connections; slow failures aren't retried
  so the UI never waits longer than before

Mesh detection:
- mesh.status now always reports device_present + detected_devices
  (previously only when the service wasn't running, so the UI couldn't
  tell 'no radio' from 'radio present, session connecting')
- Mesh page shows 'Mesh device detected' badge + 'Device detected —
  connecting' status for present-but-not-connected radios
- the 99-mesh-radio.rules udev rule was never staged into the ISO tree
  (installer searched for it and found nothing) — ship it at the media
  root and install it from install-to-disk.sh too

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

neode-ui/src/views/marketplace/MarketplaceAppCard.vue

@@ -185,6 +185,15 @@ const installProgressMessage = computed(() => {
 
 function handleImageError(event: Event) {
   const img = event.target as HTMLImageElement
+  // Catalog icon extensions drift (.svg vs .png on disk) — try the sibling
+  // extension once before giving up on the placeholder
+  if (!img.dataset.extRetry && /\.(svg|png)$/.test(img.src)) {
+    img.dataset.extRetry = '1'
+    img.src = img.src.endsWith('.svg')
+      ? img.src.replace(/\.svg$/, '.png')
+      : img.src.replace(/\.png$/, '.svg')
+    return
+  }
   if (!img.src.includes(DEFAULT_APP_ICON)) {
     img.src = DEFAULT_APP_ICON
     img.dataset.defaultIcon = '1'