fix(fedimint): stop declaring 8175 — it belongs to the UI companion, not fedimintd

Declaring the Guardian UI port on the fedimint app made the orchestrator try
to publish 8175 from fedimintd, colliding with archy-fedimint-ui which
already holds it: start_container failed on every reconcile and fedimint
crash-looped (100.82.34.38). The companion's nginx pinned to 127.0.0.1 is
what actually closes that port; the gate reports it rather than fronting it.

Also: app-login page uses the sidebar's 'A' mark instead of the full
wordmark, is pinned to the small viewport so it stays centred and the
keyboard overlays rather than scrolls it, and the install-version modal
icon uses object-contain so a non-square icon is no longer cropped.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

apps/fedimint/manifest.yml

@@ -63,16 +63,13 @@ app:
         federation itself and cannot hold a browser session.
     # Public launch port 8175 is owned by archy-fedimint-ui, which serves a
     # wait page while Bitcoin syncs and proxies here after fedimintd starts.
-    # Declared HERE because that companion has no manifest of its own, and the
-    # gate keys on the port rather than the container: without this entry it
-    # served the Guardian UI unauthenticated on every interface and never
-    # appeared in the audit. Its nginx is pinned to 127.0.0.1
-    # (docker/fedimint-ui/nginx.conf) so the gate can own the outside.
-    - host: 8175
-      container: 8175
-      protocol: tcp
-      bind: 127.0.0.1
-      auth: gated
+    # 8175 is NOT declared here. It is served by the archy-fedimint-ui
+    # companion, a different container, and declaring it on this app made the
+    # orchestrator try to publish 8175 from fedimintd — colliding with the
+    # companion that already holds it, so start_container failed forever and
+    # fedimint crash-looped (100.82.34.38, 2026-08-05). The companion's nginx
+    # is pinned to 127.0.0.1, which is what actually closes that port; the
+    # gate reports it rather than fronting it.
     - host: 8177
       container: 8175
       protocol: tcp

neode-ui/src/components/InstallVersionModal.vue

@@ -2,11 +2,15 @@
   <BaseModal :show="show" title="" max-width="max-w-lg" @close="emit('close')">
     <!-- Header: app icon + "Install Bitcoin Knots/Core" -->
     <div class="flex items-center gap-4 mb-5 -mt-2">
+      <!-- object-contain, not the default fill: app icons are not all square
+           (bitcoin-knots is not), so a fixed 56x56 box distorted or cropped the
+           mark against the rounded corners. Contain plus a dark plate shows the
+           whole icon whatever its aspect ratio. -->
       <img
         v-if="app?.icon"
         :src="app.icon"
         :alt="app?.title || ''"
-        class="w-14 h-14 rounded-xl shadow-lg shrink-0"
+        class="w-14 h-14 rounded-xl shadow-lg shrink-0 object-contain bg-black/40 p-1"
       />
       <div v-else class="w-14 h-14 rounded-xl bg-white/10 flex items-center justify-center shrink-0">
         <svg class="w-7 h-7 text-white/40" fill="none" stroke="currentColor" viewBox="0 0 24 24">

releases/app-catalog.json

@@ -1386,13 +1386,6 @@
               "host": 8174,
               "protocol": "tcp"
             },
-            {
-              "auth": "gated",
-              "bind": "127.0.0.1",
-              "container": 8175,
-              "host": 8175,
-              "protocol": "tcp"
-            },
             {
               "auth": "local",
               "bind": "127.0.0.1",
@@ -4898,7 +4891,5 @@
     }
   },
   "schema": 1,
-  "signature": "4c3cb577e6fe3884f4ad918ce3f14a3011ea0e175ab23ea1521a1d04a4f139f53eb86b0617b1183f2e8bbac2b046fe4965ae9f2878ba2cf08bac8262d68d140e",
-  "signed_by": "did:key:z6Mkfu5LT8d4DjETtrkATvHh9Dvcbnr7zBCUwfau8Sw7DLWT",
   "updated": "2026-08-05"
 }