When the IndeeHub container's own index.html already bundles nostr-provider.js, the managed nginx patch no longer injects a sub_filter provider and strips any existing one, staying idempotent either way; the provider cache-bust marker moves to tab-signer-v5. The rental request API now accepts an explicit boolean renewExpired choice, validates it, and forwards it to the dashboard bridge, with a focused provider regression.