fix: add --add-host for host.containers.internal in package install path

Containers installed via marketplace need host.containers.internal
to resolve for Tor proxy (9050) and inter-service communication.
Was only in first-boot-containers.sh and podman_client.rs, not in
the direct podman run path used by package.install RPC.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

core/archipelago/src/api/rpc/package/install.rs

@@ -191,6 +191,9 @@ impl RpcHandler {
             }
         }
 
+        // DNS: ensure host.containers.internal resolves (needed for Tor proxy, inter-service calls)
+        run_args.push("--add-host=host.containers.internal:host-gateway");
+
         // Security hardening (skip for privileged containers)
         let security_caps: Vec<String> = if !is_tailscale {
             get_app_capabilities(package_id)