fix: overhaul container lifecycle — recovery, health, uninstall, UI state

Container recovery:
- Health monitor: MAX_RESTART_ATTEMPTS 3→10, interval 60s→120s
- Dependency-aware restarts: won't restart services before their deps
- Reset dependent counters when a dependency recovers
- Handle "created" state containers (were invisible to health monitor)
- Added IndeedHub, mempool-api, mysql to tier system
- Crash recovery: podman start timeout 30s→120s with retry
- Podman client: socket timeout 5s→30s, added restart policy

UI state representation:
- Exit code 0 shows "stopped" (gray), not "crashed" (red)
- Exit code 137 shows "killed (OOM)"
- Non-zero exit shows "crashed" (red)
- Added exit_code field to PackageDataEntry

Install/uninstall fixes:
- Install returns error when container doesn't start (was silent success)
- Post-install hooks awaited instead of fire-and-forget tokio::spawn
- Uninstall: graceful rm before force, volume prune, network cleanup
- Uninstall returns error on partial failure (was 200 OK)

Config consistency:
- DB passwords read from /var/lib/archipelago/secrets/ (was hardcoded)
- Bitcoin: added ZMQ ports 28332/28333 for LND block notifications
- IndeedHub port 7777→8190 (was conflicting with strfry)
- Marketplace versions: LND 0.17.4→0.18.4, Mempool 2.5.0→3.0.0

Performance:
- Metrics collector interval 60s→300s (was duplicating health monitor)
- Podman client: proper error propagation instead of unwrap_or_default

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.claude/memory/project_iso_size_reduction.md

@@ -0,0 +1,29 @@
+---
+name: ISO Size Reduction Plan
+description: Plan to reduce ISO from 3.9GB — prioritized phases for post-beta
+type: project
+---
+
+Current ISO: ~3.9GB (unbundled). Target: <1.5GB.
+
+**Why:** Debian Live base (~800MB) + rootfs with kiosk/Podman/firmware (~2.1GB) + squashfs overhead.
+
+**Phase 1 — Quick wins (post-beta, ~500MB-1GB savings):**
+- Strip unused firmware blobs (WiFi chipsets, GPU)
+- Remove build-only packages from rootfs (not needed at runtime)
+- `--no-install-recommends` in all apt installs
+- Strip debug symbols from binaries
+- Remove man pages, docs, locale data (`localepurge`)
+
+**Phase 2 — Minimal base (~1-1.5GB savings):**
+- Replace Debian Live ISO with custom `debootstrap --variant=minbase` live image
+- Make kiosk (X11 + Chromium ~400MB) optional / separate overlay
+- Alpine-based rootfs alternative
+
+**Phase 3 — Long term (<1GB target):**
+- Custom kernel with only needed modules
+- A/B read-only root partition (no live boot infrastructure)
+- Network installer variant (tiny ISO, needs internet)
+- Reproducible builds with exact dep trees
+
+**How to apply:** Each phase is independent. Phase 1 is safe to do anytime. Phase 2 requires testing the boot chain. Phase 3 is architectural.