Release v0.1.1:2 with certrelay, nacho, and prebuilt subspaces.

Remove the embedded explorer/indexer stack, switch subspaces to prebuilt images, add certrelay and nacho as always-on services, expose Spaces and Subs APIs, and wire optional HTTP basic auth for subs and subs-prover with the correct SUBS_BASIC_AUTH_PASSWORD env var.

Co-authored-by: Cursor <cursoragent@cursor.com>

startos/init/taskSeedNacho.ts

@@ -0,0 +1,21 @@
+import { storeJson } from '../fileModels/storeJson'
+import { sdk } from '../sdk'
+import { NACHO_DEFAULT_WORKSHOP_PDF_LINK_TEXT } from '../utils'
+
+// Note: the nacho Ignore Names list is NOT seeded here. It lives in
+// /data/nacho/ignore_names.txt and is created with the default on first
+// daemon start by the nacho-setup oneshot in main.ts.
+export const taskSeedNacho = sdk.setupOnInit(async (effects) => {
+  const store = await storeJson.read().once()
+
+  if (
+    store?.nachoWorkshopPdfLinkText === null ||
+    store?.nachoWorkshopPdfLinkText === undefined
+  ) {
+    await storeJson.merge(
+      effects,
+      { nachoWorkshopPdfLinkText: NACHO_DEFAULT_WORKSHOP_PDF_LINK_TEXT },
+      { allowWriteAfterConst: true },
+    )
+  }
+})