feat(container): wire ProdContainerOrchestrator + BootReconciler into main

Step 6 of the rust-orchestrator migration. Construct the container
orchestrator once in main.rs, call load_manifests + adopt_existing
immediately after Config::load, log the adoption report, and spawn
BootReconciler::run_forever with the 30s default interval. Thread the
orchestrator through Server::new -> ApiHandler::new -> RpcHandler::new
so the reconciler and RPC layer share one instance.

Wire a tokio::sync::Notify through the SIGTERM/SIGINT shutdown path so
the reconciler exits cleanly alongside the server drain. Uses notify_one
so the signal stores a permit if the reconciler is mid reconcile_all
when the signal fires.

Delete the commented-out run_boot_reconciliation block in main.rs that
documented the prior bash-script approach being unsafe on unbundled
installs — the new reconciler is manifest-driven and only touches apps
present in /opt/archipelago/apps, fixing that concern.

cargo check -p archipelago clean (6 pre-existing dead-code warnings on
trait methods not yet exercised until Step 9 hot-swap). Container test
suite 43/44 pass; the one failure (container::image_versions::
test_parse_image_versions) is pre-existing and unrelated.

core/archipelago/src/server.rs

@@ -1,6 +1,8 @@
 use crate::api::ApiHandler;
 use crate::config::{Config, ContainerRuntime};
-use crate::container::{docker_packages, DockerPackageScanner};
+use crate::container::{
+    docker_packages, ContainerOrchestrator, DevContainerOrchestrator, DockerPackageScanner,
+};
 use crate::identity::{self, NodeIdentity};
 use crate::monitoring::MetricsStore;
 use crate::node_message;
@@ -26,7 +28,11 @@ pub struct Server {
 }
 
 impl Server {
-    pub async fn new(config: Config) -> Result<Self> {
+    pub async fn new(
+        config: Config,
+        orchestrator: Option<Arc<dyn ContainerOrchestrator>>,
+        dev_orchestrator: Option<Arc<DevContainerOrchestrator>>,
+    ) -> Result<Self> {
         let state_manager = Arc::new(StateManager::new());
 
         // Load node identity and set stable server_info.
@@ -172,8 +178,16 @@ impl Server {
             Some(config.data_dir.clone()),
         );
 
-        let api_handler =
-            Arc::new(ApiHandler::new(config.clone(), state_manager.clone(), metrics_store).await?);
+        let api_handler = Arc::new(
+            ApiHandler::new(
+                config.clone(),
+                state_manager.clone(),
+                metrics_store,
+                orchestrator,
+                dev_orchestrator,
+            )
+            .await?,
+        );
 
         // Initialize mesh networking service (if config has enabled: true)
         {