Build SpacesOps StartOS package (v1.0.0:0)

Initial .s9pk for SpacesOps, targeting StartOS 0.4.0.x with SDK 1.5.1.

- Single managed daemon from spacesops/spacesops:v1.0.0 (x86_64 + aarch64),
  keeping the image entrypoint (/app/docker-entrypoint.sh node server.js).
  Forces PLATFORM_HOST=0.0.0.0 / PLATFORM_PORT=7264 so the StartOS proxy can
  reach the app. Single `ui` interface on 7264.
- Depends on the Spaces service (>=0.0.9:3) and auto-wires the spaced RPC creds:
  main.ts mounts the Spaces `main` volume read-only at /spaces-data, execs a
  read of its store.json inside the subcontainer, and injects SPACED_RPC_USER/
  PASSWORD + SPACED_RPC_URL=http://spaces.startos:7225. Throws to retry until
  Spaces is installed and seeded.
- Generates a Nostr operator keypair (nostr-tools, bundled by ncc) and a strong
  session secret in idempotent init tasks (.once() reads, allowWriteAfterConst
  merges). Actions: show-operator-credentials, import-operator-key,
  show-admin-credentials (surfaces the fixed admin/Whatever! login with a
  warning), configure-platform (optional relay/mode/CoinGecko/SUBSD).
- Install alert warns to install Spaces first and about the fixed admin
  credential. Backs up the `main` volume.
- Icon: icon.svg (source spacesops.svg). The `spaces` dependency uses
  assets/spaces-icon.png for its Marketplace metadata.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

startos/fileModels/storeJson.ts

@@ -0,0 +1,24 @@
+import { FileHelper, z } from '@start9labs/start-sdk'
+import { sdk } from '../sdk'
+
+const shape = z.object({
+  // Nostr operator keypair — generated once in init, or replaced via the
+  // "Import Operator Key" action. SpacesOps signs operator events with it.
+  operatorSecretHex: z.string().nullable().catch(null),
+  operatorPublicHex: z.string().nullable().catch(null),
+  // Strong replacement for the app's weak hardcoded session secret.
+  sessionSecret: z.string().nullable().catch(null),
+  // Optional config set via the "Configure Platform" action.
+  platformMode: z.enum(['prod', 'test']).nullable().catch(null),
+  operatorRelay: z.string().nullable().catch(null),
+  coingeckoApiKey: z.string().nullable().catch(null),
+  coingeckoTokenCoins: z.string().nullable().catch(null),
+  subsdUrl: z.string().nullable().catch(null),
+  subsdUser: z.string().nullable().catch(null),
+  subsdPassword: z.string().nullable().catch(null),
+})
+
+export const storeJson = FileHelper.json(
+  { base: sdk.volumes.main, subpath: 'store.json' },
+  shape,
+)