Release v0.1.1:2 with certrelay, nacho, and prebuilt subspaces.

Remove the embedded explorer/indexer stack, switch subspaces to prebuilt images, add certrelay and nacho as always-on services, expose Spaces and Subs APIs, and wire optional HTTP basic auth for subs and subs-prover with the correct SUBS_BASIC_AUTH_PASSWORD env var.

Co-authored-by: Cursor <cursoragent@cursor.com>

startos/manifest/index.ts

@@ -17,27 +17,18 @@ export const manifest = setupManifest({
       source: { dockerTag: 'horologger/spaces:v0.0.9s' },
       arch: ['x86_64', 'aarch64'],
     },
-    postgres: {
-      source: { dockerTag: 'postgres:16.3' },
-      arch: ['x86_64', 'aarch64'],
-    },
-    // TODO(prebuilt-indexer): add the prebuilt explorer-indexer image here once
-    // it's produced, e.g. 'indexer-go': { source: { dockerTag:
-    // 'horologger/explorer-indexer:<tag>' }, arch: ['x86_64','aarch64'] }.
-    // The golang:1.23-alpine builder image + build-from-source chain were
-    // removed to shrink the .s9pk and cut first-enable latency.
-    //
-    // TODO(prebuilt-explorer): add the prebuilt explorer (SvelteKit) image here,
-    // replacing the node:20-alpine builder, e.g. 'explorer-ui': { source: {
-    // dockerTag: 'horologger/explorer:<tag>' }, arch: ['x86_64','aarch64'] }.
     subspaces: {
-      source: { dockerTag: 'horologger/subs:v0.1.0' },
+      source: { dockerTag: 'horologger/subs:v0.1.2' },
       arch: ['x86_64', 'aarch64'],
     },
     certrelay: {
       source: { dockerTag: 'horologger/certrelay:v0.2.3' },
       arch: ['x86_64', 'aarch64'],
     },
+    nacho: {
+      source: { dockerTag: 'horologger/nacho:v1.0.0' },
+      arch: ['x86_64', 'aarch64'],
+    },
   },
   alerts: {
     install: null,