Issue 17: StartOS 0.4.0 packaging

- Dockerfile: multi-stage build (Node frontend + Python backend)
- StartOS manifest, interfaces, backups, version graph
- start.sh: auto-generates session secret, creates first approver on boot
- Backend serves built frontend as SPA in production
- Single data volume for SQLite DB, platform backups cover it

deploy/startos/install/versionGraph.ts

@@ -0,0 +1,7 @@
+import { VersionGraph } from '@start9labs/start-sdk'
+import { current, other } from './versions'
+
+export const versionGraph = VersionGraph.of({
+  current,
+  other,
+})

deploy/startos/install/versions/index.ts

@@ -0,0 +1,2 @@
+export { v_0_1_0 as current } from './v_0_1_0'
+export const other = []

deploy/startos/install/versions/v_0_1_0.ts

@@ -0,0 +1,16 @@
+import { VersionInfo } from '@start9labs/start-sdk'
+import * as fs from 'fs'
+
+export const v_0_1_0 = VersionInfo.of({
+  version: '0.1.0:0',
+  releaseNotes: {
+    en_US: 'Initial release. Internal fund administration and quarterly valuation sign-off.',
+  },
+  migrations: {
+    up: async ({ effects }) => {
+      // DB initialization handled by Alembic on app startup.
+      // First approver account created by start.sh if no users exist.
+    },
+    down: async ({ effects }) => {},
+  },
+})