Build SpacesOps StartOS package (v1.0.0:0)

Initial .s9pk for SpacesOps, targeting StartOS 0.4.0.x with SDK 1.5.1.

- Single managed daemon from spacesops/spacesops:v1.0.0 (x86_64 + aarch64),
  keeping the image entrypoint (/app/docker-entrypoint.sh node server.js).
  Forces PLATFORM_HOST=0.0.0.0 / PLATFORM_PORT=7264 so the StartOS proxy can
  reach the app. Single `ui` interface on 7264.
- Depends on the Spaces service (>=0.0.9:3) and auto-wires the spaced RPC creds:
  main.ts mounts the Spaces `main` volume read-only at /spaces-data, execs a
  read of its store.json inside the subcontainer, and injects SPACED_RPC_USER/
  PASSWORD + SPACED_RPC_URL=http://spaces.startos:7225. Throws to retry until
  Spaces is installed and seeded.
- Generates a Nostr operator keypair (nostr-tools, bundled by ncc) and a strong
  session secret in idempotent init tasks (.once() reads, allowWriteAfterConst
  merges). Actions: show-operator-credentials, import-operator-key,
  show-admin-credentials (surfaces the fixed admin/Whatever! login with a
  warning), configure-platform (optional relay/mode/CoinGecko/SUBSD).
- Install alert warns to install Spaces first and about the fixed admin
  credential. Backs up the `main` volume.
- Icon: icon.svg (source spacesops.svg). The `spaces` dependency uses
  assets/spaces-icon.png for its Marketplace metadata.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

startos/actions/showAdminCredentials.ts

@@ -0,0 +1,52 @@
+import { i18n } from '../i18n'
+import { sdk } from '../sdk'
+import { ADMIN_PASSWORD, ADMIN_USER } from '../utils'
+
+export const showAdminCredentials = sdk.Action.withoutInput(
+  // id
+  'show-admin-credentials',
+
+  // metadata
+  async ({ effects }) => ({
+    name: i18n('Show Admin Credentials'),
+    description: i18n(
+      'Display the built-in admin username and password for the SpacesOps admin area.',
+    ),
+    warning: null,
+    allowedStatuses: 'any',
+    group: null,
+    visibility: 'enabled',
+  }),
+
+  // run
+  async ({ effects }) => ({
+    version: '1',
+    title: i18n('Admin Credentials'),
+    message: i18n(
+      'WARNING: these are FIXED, well-known credentials baked into the image and cannot be changed without rebuilding it. The admin area can run SQL and manage tenants. Keep this service private (Tor-only) and never expose the admin routes to the public internet.',
+    ),
+    result: {
+      type: 'group',
+      value: [
+        {
+          type: 'single',
+          name: i18n('Username'),
+          description: null,
+          value: ADMIN_USER,
+          masked: false,
+          copyable: true,
+          qr: false,
+        },
+        {
+          type: 'single',
+          name: i18n('Password'),
+          description: null,
+          value: ADMIN_PASSWORD,
+          masked: true,
+          copyable: true,
+          qr: false,
+        },
+      ],
+    },
+  }),
+)