Save in-progress keysat integration and StartOS 0.4 work

Snapshot of the working tree before cleanup. Captures:
- Keysat licensing: server/license.js, /api/license/* endpoints in
  server/index.js, activation modal in public/index.html, embedded
  Ed25519 issuer key (assets/issuer.pub).
- StartOS 0.4 expansion: setApiKey action, version files v0.1.1
  through v0.1.15, file-models/config.json.ts, manifest updates.
- Self-hosted registry server (startos-registry/).
- Build/deploy scripts (bin/bump-version.sh, bin/deploy.sh, vendored
  yt-dlp binary), .gitignore, .deploy.env.example.
- Recent design docs (KEYSAT_INTEGRATION.md, UPGRADE-DESIGN.md) —
  retained here so they remain recoverable when removed in the
  follow-up cleanup commit.

Dockerfile

@@ -4,14 +4,23 @@
 #  Includes: Node.js 20, Python 3, yt-dlp, ffmpeg
 #
 #  Uses Debian slim (not Alpine) because:
-#  - yt-dlp's --impersonate chrome requires curl_cffi (compiled C extension)
-#  - curl_cffi's prebuilt wheels target glibc, not musl
 #  - Debian is more reliable for pip-installed packages with C deps
 # ─────────────────────────────────────────────────────────
 
 # ── Stage 1: Install Node.js dependencies ──────────────────
 FROM node:20-slim AS builder
 
+# git is required by npm to clone the @keysat/licensing-client git+https
+# dependency. Stripped from the final image (only used in this builder stage).
+# The url.insteadOf rewrites force npm/git to use https for github.com even
+# when npm's git resolver tries ssh first — there's no ssh client or key in
+# this container.
+RUN apt-get update && apt-get install -y --no-install-recommends git ca-certificates \
+  && rm -rf /var/lib/apt/lists/* \
+  && git config --global --add url."https://github.com/".insteadOf "ssh://git@github.com/" \
+  && git config --global --add url."https://github.com/".insteadOf "git@github.com:" \
+  && git config --global --add url."https://github.com/".insteadOf "git://github.com/"
+
 WORKDIR /app/server
 COPY server/package.json server/package-lock.json* ./
 RUN npm ci --production --ignore-scripts 2>/dev/null || npm install --production --ignore-scripts
@@ -36,13 +45,14 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     ffmpeg \
     ca-certificates \
   && rm -rf /var/lib/apt/lists/* \
-  && pip3 install --break-system-packages yt-dlp curl_cffi \
+  && pip3 install --break-system-packages yt-dlp \
   && yt-dlp --version
 
 # Copy Node.js app from builder
 COPY --from=builder /app/server/node_modules ./server/node_modules/
 COPY server/package.json ./server/
 COPY server/index.js ./server/
+COPY server/license.js ./server/
 COPY public/ ./public/
 COPY assets/ ./assets/