release(catalog): BTCPay Server 2.4.2 — signed

Signed by the pinned release root and verified before publishing
(`ceremony verify` → OK). A present-but-invalid signature is a hard reject on
nodes, so verification is the gate, not the presence of a signature field.

Surgical edit rather than a regenerate: only the btcpay-server entry changed
(66 apps in, 66 out; 49 entries still resolve through the legacy registry,
untouched). A full regeneration would have embedded the repo's manifests,
which now name the new registry domain that no deployed binary trusts yet —
publishing that would have broken every app install fleet-wide, during a
security push. That sequencing is being fixed separately.

BTCPay's image comes from docker.io, so it is unaffected by the registry
migration either way.

Nodes pick this up via package.check_updates → refresh_catalog → reload
manifests, then package.update (stop → pull → remove → recreate → verify,
with rollback on failure).

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

releases/app-catalog.json

@@ -880,7 +880,7 @@
                 "template": "{{HOST_IP}}:23000"
               }
             ],
-            "image": "docker.io/btcpayserver/btcpayserver:2.3.9",
+            "image": "docker.io/btcpayserver/btcpayserver:2.4.2",
             "network": "archy-net",
             "pull_policy": "if-not-present",
             "secret_env": [
@@ -972,7 +972,7 @@
             "network_policy": "isolated",
             "readonly_root": false
           },
-          "version": "2.3.9",
+          "version": "2.4.2",
           "volumes": [
             {
               "options": [
@@ -985,7 +985,7 @@
           ]
         }
       },
-      "version": "2.3.9"
+      "version": "2.4.2"
     },
     "core-lightning": {
       "manifest": {
@@ -4897,7 +4897,7 @@
     }
   },
   "schema": 1,
-  "signature": "a9a0bf60aa6c47ae970a6c7c3e19e9390ee7af157f425c2e38b1bbb194f0315b73ddf16bc46244b36390454787a1ddecc559be806098fdf569d3315f388b9006",
+  "signature": "532eb226558e175cbb7c0aa307d0cc1800ed0794266795d817509ab29fcd7334383e33c257552f7e29ba033e99205b6b73285b88e06d79f2d6096629d6471109",
   "signed_by": "did:key:z6Mkfu5LT8d4DjETtrkATvHh9Dvcbnr7zBCUwfau8Sw7DLWT",
-  "updated": "2026-08-06"
+  "updated": "2026-08-07"
 }