feat: v1.2.0-alpha — E2E encrypted mesh relay, steganography, relay status polling

Phase 5 mesh networking:
- E2E encrypted TX relay (X25519 + ChaCha20-Poly1305) — non-Archy nodes
  relay encrypted blobs transparently via Meshcore native routing
- Steganographic encoding modes (WeatherStation, SensorNetwork) — traffic
  looks like sensor data on the wire, 0xAA marker, configurable per-node
- Pre-flight Bitcoin Core health check on relay node — specific error codes
  (bitcoin_unreachable, bitcoin_syncing, tx_rejected) instead of generic fails
- mesh.relay-status RPC endpoint — frontend polls for relay result every 3s
- On-Chain / Lightning tabs in Off-Grid Bitcoin panel
- Archy Peers vs Mesh Broadcast relay mode selector
- Mesh view fills viewport (no page scroll), internal panel scrolling
- Version bump to 1.2.0-alpha

Also includes: deploy hardening, container fixes, IndeedHub updates,
boot screen, dashboard improvements, MASTER_PLAN task tracking

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

core/archipelago/src/api/rpc/lnd.rs

@@ -751,16 +751,21 @@ impl RpcHandler {
             return Err(anyhow::anyhow!("Failed to sign TX: {}", msg));
         }
 
-        // raw_final_tx is the hex-encoded signed transaction — ready for broadcast
-        let raw_final_tx = body.get("raw_final_tx")
+        // raw_final_tx from LND is base64-encoded — decode to hex for Bitcoin RPC
+        let raw_final_tx_b64 = body.get("raw_final_tx")
             .and_then(|v| v.as_str())
-            .ok_or_else(|| anyhow::anyhow!("No raw_final_tx in response"))?
-            .to_string();
+            .ok_or_else(|| anyhow::anyhow!("No raw_final_tx in response"))?;
 
-        info!(addr, amount_sats, tx_len = raw_final_tx.len(), "Created raw TX for mesh relay (NOT broadcast)");
+        use base64::Engine;
+        let tx_bytes = base64::engine::general_purpose::STANDARD
+            .decode(raw_final_tx_b64)
+            .context("Failed to decode raw_final_tx base64")?;
+        let raw_tx_hex = hex::encode(&tx_bytes);
+
+        info!(addr, amount_sats, tx_len = raw_tx_hex.len(), "Created raw TX for mesh relay (NOT broadcast)");
 
         Ok(serde_json::json!({
-            "raw_tx_hex": raw_final_tx,
+            "raw_tx_hex": raw_tx_hex,
             "amount_sats": amount_sats,
             "addr": addr,
             "broadcast": false,