Issue 17: StartOS 0.4.0 packaging

- Dockerfile: multi-stage build (Node frontend + Python backend)
- StartOS manifest, interfaces, backups, version graph
- start.sh: auto-generates session secret, creates first approver on boot
- Backend serves built frontend as SPA in production
- Single data volume for SQLite DB, platform backups cover it

deploy/startos/actions/index.ts

@@ -0,0 +1,4 @@
+import { sdk } from '../sdk'
+
+// No custom actions for v1. Config is handled at install time.
+export const actions = sdk.Actions.of()