feat: v1.2.0-alpha — E2E encrypted mesh relay, steganography, relay status polling

Phase 5 mesh networking:
- E2E encrypted TX relay (X25519 + ChaCha20-Poly1305) — non-Archy nodes
  relay encrypted blobs transparently via Meshcore native routing
- Steganographic encoding modes (WeatherStation, SensorNetwork) — traffic
  looks like sensor data on the wire, 0xAA marker, configurable per-node
- Pre-flight Bitcoin Core health check on relay node — specific error codes
  (bitcoin_unreachable, bitcoin_syncing, tx_rejected) instead of generic fails
- mesh.relay-status RPC endpoint — frontend polls for relay result every 3s
- On-Chain / Lightning tabs in Off-Grid Bitcoin panel
- Archy Peers vs Mesh Broadcast relay mode selector
- Mesh view fills viewport (no page scroll), internal panel scrolling
- Version bump to 1.2.0-alpha

Also includes: deploy hardening, container fixes, IndeedHub updates,
boot screen, dashboard improvements, MASTER_PLAN task tracking

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

neode-ui/src/views/AppSession.vue

@@ -333,7 +333,6 @@ const HTTPS_PROXY_PATHS: Record<string, string> = {
   'immich_server': '/app/immich/',
   'tailscale': '/app/tailscale/',
   'endurain': '/app/endurain/',
-  'indeedhub': '/app/indeedhub/',
   'dwn': '/app/dwn/',
 }
 
@@ -385,6 +384,17 @@ const appUrl = computed(() => {
   const proxyPath = PROXY_APPS[id]
   if (proxyPath) return `${window.location.origin}${proxyPath}`
 
+  // IndeedHub: always direct port (X-Frame-Options removed by deploy script)
+  if (id === 'indeedhub') {
+    const port = APP_PORTS[id]
+    if (port) {
+      let base = `${window.location.protocol}//${window.location.hostname}:${port}`
+      const subpath = route.query.path as string | undefined
+      if (subpath) base += subpath
+      return base
+    }
+  }
+
   // HTTPS: use nginx proxy to avoid mixed content (browser blocks HTTP iframes in HTTPS pages)
   if (window.location.protocol === 'https:') {
     const httpsProxy = HTTPS_PROXY_PATHS[id]