feat: add container security hardening and Fedimint setup wizard

Add --cap-drop=ALL, --security-opt=no-new-privileges:true to all
non-privileged containers. Per-app capability grants for apps needing
CHOWN/SETUID/SETGID. Read-only root filesystem with tmpfs for
compatible apps (searxng, grafana, uptime-kuma, filebrowser,
photoprism, vaultwarden). Add Fedimint "Create a Community" goal
with 4-step wizard. Fix deploy script cp -rf for audio directory.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

neode-ui/src/composables/useMobileBackButton.ts

@@ -25,24 +25,28 @@ export function useMobileBackButton() {
   
   function updateTabBarHeight() {
     if (typeof window === 'undefined') return
-    
+
     // Try to find the mobile tab bar element
     const tabBar = document.querySelector('[data-mobile-tab-bar]') as HTMLElement
-    if (tabBar) {
+    if (tabBar && tabBar.offsetHeight > 0) {
       tabBarHeight.value = tabBar.offsetHeight
-    } else {
-      // Fallback: read from CSS variable if available
-      const cssVar = getComputedStyle(document.documentElement)
-        .getPropertyValue('--mobile-tab-bar-height')
-        .trim()
-      
-      if (cssVar) {
-        const height = parseFloat(cssVar)
-        if (!isNaN(height)) {
-          tabBarHeight.value = height
-        }
+      return
+    }
+
+    // Fallback: read from CSS variable if available
+    const cssVar = getComputedStyle(document.documentElement)
+      .getPropertyValue('--mobile-tab-bar-height')
+      .trim()
+
+    if (cssVar) {
+      const height = parseFloat(cssVar)
+      if (!isNaN(height) && height > 0) {
+        tabBarHeight.value = height
+        return
       }
     }
+
+    // Final fallback: keep current value (don't reset to 0)
   }
   
   onMounted(() => {