feat: add container security hardening and Fedimint setup wizard

Add --cap-drop=ALL, --security-opt=no-new-privileges:true to all
non-privileged containers. Per-app capability grants for apps needing
CHOWN/SETUID/SETGID. Read-only root filesystem with tmpfs for
compatible apps (searxng, grafana, uptime-kuma, filebrowser,
photoprism, vaultwarden). Add Fedimint "Create a Community" goal
with 4-step wizard. Fix deploy script cp -rf for audio directory.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

neode-ui/src/composables/useAudioPlayer.ts

@@ -6,6 +6,7 @@ const currentName = ref('')
 const playing = ref(false)
 const currentTime = ref(0)
 const duration = ref(0)
+const error = ref<string | null>(null)
 
 function play(src: string, name: string) {
   if (!audio.value) {
@@ -15,6 +16,7 @@ function play(src: string, name: string) {
     })
     audio.value.addEventListener('loadedmetadata', () => {
       duration.value = audio.value?.duration ?? 0
+      error.value = null
     })
     audio.value.addEventListener('ended', () => {
       playing.value = false
@@ -24,8 +26,14 @@ function play(src: string, name: string) {
     })
     audio.value.addEventListener('play', () => {
       playing.value = true
+      error.value = null
+    })
+    audio.value.addEventListener('error', () => {
+      playing.value = false
+      error.value = 'Could not play audio. File Browser may not be running.'
     })
   }
+  error.value = null
 
   if (currentSrc.value === src && playing.value) {
     audio.value.pause()
@@ -78,5 +86,6 @@ export function useAudioPlayer() {
     duration,
     progress,
     currentSrc,
+    error,
   }
 }

neode-ui/src/composables/useMobileBackButton.ts

@@ -25,24 +25,28 @@ export function useMobileBackButton() {
   
   function updateTabBarHeight() {
     if (typeof window === 'undefined') return
-    
+
     // Try to find the mobile tab bar element
     const tabBar = document.querySelector('[data-mobile-tab-bar]') as HTMLElement
-    if (tabBar) {
+    if (tabBar && tabBar.offsetHeight > 0) {
       tabBarHeight.value = tabBar.offsetHeight
-    } else {
-      // Fallback: read from CSS variable if available
-      const cssVar = getComputedStyle(document.documentElement)
-        .getPropertyValue('--mobile-tab-bar-height')
-        .trim()
-      
-      if (cssVar) {
-        const height = parseFloat(cssVar)
-        if (!isNaN(height)) {
-          tabBarHeight.value = height
-        }
+      return
+    }
+
+    // Fallback: read from CSS variable if available
+    const cssVar = getComputedStyle(document.documentElement)
+      .getPropertyValue('--mobile-tab-bar-height')
+      .trim()
+
+    if (cssVar) {
+      const height = parseFloat(cssVar)
+      if (!isNaN(height) && height > 0) {
+        tabBarHeight.value = height
+        return
       }
     }
+
+    // Final fallback: keep current value (don't reset to 0)
   }
   
   onMounted(() => {