chore(catalog): sign app-catalog — BotFights 1.2.8, CSP img-src + AI-answer discoverability

releases/app-catalog.json regenerated and signed by the release-root key
(did🔑z6MkkidEnEpo6qHMCNSZoNKWtvQvxq3whnaME9wGgEFhq7ur). botfights is
the only content change vs the previously-published catalog (verified
structurally — all other 65 apps unchanged): 1.2.7 -> 1.2.8, fixes broken
profile pictures (CSP img-src) and makes the AI-answer feature discoverable
by default.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

releases/app-catalog.json

@@ -732,7 +732,7 @@
                 "name": "botfights-jwt-secret"
               }
             ],
-            "image": "146.59.87.168:3000/lfg2025/botfights:1.2.7",
+            "image": "146.59.87.168:3000/lfg2025/botfights:1.2.8",
             "pull_policy": "always",
             "secret_env": [
               {
@@ -810,7 +810,7 @@
             "seccomp_profile": "default",
             "user": 1001
           },
-          "version": "1.2.7",
+          "version": "1.2.8",
           "volumes": [
             {
               "source": "botfights-data",
@@ -830,7 +830,7 @@
           ]
         }
       },
-      "version": "1.2.7"
+      "version": "1.2.8"
     },
     "btcpay": {
       "image": "docker.io/btcpayserver/btcpayserver:2.3.9",
@@ -4755,7 +4755,7 @@
     }
   },
   "schema": 1,
-  "signature": "06c65f2d325f5e76a3ae6ec936ecd0ea1aba4d03a94f5d508b5abfbb075cc6f452ab549b4cf8207119af23c8829b1f8aa02d3a36f84bd3e80a3d5c6850978404",
+  "signature": "785ee9f1be3cd3f98ca8bbf1f6a4c0ad58a8b4a68bc32edc228f063f65e5efd1a9d78f2d2a8c3bda70947121bc265765e79a15237fca81c82442ef3bc596430e",
   "signed_by": "did:key:z6MkkidEnEpo6qHMCNSZoNKWtvQvxq3whnaME9wGgEFhq7ur",
   "updated": "2026-07-31"
 }