fix: RC hardware-test feedback — mesh serial access, federation.list, masked install errors

- image: create archipelago user with dialout so the backend can open
  /dev/ttyUSB*/ttyACM* LoRa radios; doctor Fix 14 heals existing nodes
  (verified live on the .65 RC install — device detected after the fix)
- Web5Federation.vue called nonexistent federation.list (Unknown method);
  now uses federation.list-nodes + federation.list-pending-requests with
  a last-seen-based online count
- sanitizer: let app-install dependency errors through — 'LND requires a
  running Bitcoin node' was masked as 'Check server logs', so install
  failures on fresh nodes looked random

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

scripts/container-doctor.sh

@@ -614,6 +614,23 @@ fix_missing_catatonit() {
     return 1
 }
 
+# ── Fix 14: archipelago user missing dialout (mesh radios) ───
+# The image used to create the archipelago user with only `sudo`, so the
+# backend couldn't open /dev/ttyUSB*/ttyACM* serial LoRa radios — Mesh
+# never detected a plugged-in device (observed on the 1.7.99 RC install
+# 2026-07-13). Group change takes effect on the next service restart; we
+# restart archipelago only if a serial device is actually present.
+fix_archipelago_dialout() {
+    id -nG archipelago 2>/dev/null | grep -qw dialout && return 1
+    usermod -aG dialout archipelago 2>/dev/null || return 1
+    log "Added archipelago to dialout (serial mesh radios were unreadable)"
+    if ls /dev/ttyUSB* /dev/ttyACM* >/dev/null 2>&1; then
+        systemctl try-restart archipelago 2>/dev/null || true
+        log "Restarted archipelago to pick up dialout (radio present)"
+    fi
+    return 0
+}
+
 # ── Main ─────────────────────────────────────────────────────
 
 # If remote host provided, run via SSH
@@ -646,6 +663,7 @@ run_fix "rootless-ports" fix_missing_rootless_ports
 run_fix "npm-public-hosts" fix_npm_public_hosts
 run_fix "btcpay-route-hints" fix_btcpay_route_hints
 run_fix "catatonit"       fix_missing_catatonit
+run_fix "dialout"         fix_archipelago_dialout
 
 echo ""
 if [ $FIXES_APPLIED -gt 0 ]; then