release: refresh v1.5.0-alpha artifacts to match shipped binary

The original v1.5.0-alpha cut (commit 77206a89) captured the binary
at that exact point in main. Since then ~12 commits landed that are
now live on every fleet node — own_fips_npub in state sync,
bidirectional peer flow, lazy-bind peer listener, self-peer guard,
multi-relay nostr publish + UI, avatar/banner upload, bidirectional
network requests. Rather than bump to v1.5.1-alpha for an in-flight
alpha iteration, refresh the artifacts in place so the manifest +
binary + frontend all agree.

- archipelago: sha 77206a89→e3df7a68, 40,020,488→40,078,936 bytes
- archipelago-frontend-1.5.0-alpha.tar.gz: sha 83fbacf3→2bf973ee,
  53,359,792→53,358,751 bytes
- changelog extended from 7 to 15 lines to cover every landed item.

check-release-manifest.sh passes — safe to publish.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

releases/manifest.json

@@ -6,9 +6,17 @@
     "Per-service transport preference Settings card (Auto / FIPS / Tor) per node-to-node surface",
     "Transport badge (FIPS / TOR / LAN / MESH) on every federated node card, reflecting the transport actually used on the last reach",
     "Transitive federation — accepting one peer automatically learns their trusted peers (one hop) so subsequent syncs go over FIPS directly",
+    "State snapshots advertise own_fips_npub so pre-v1.4 federation pairs auto-upgrade to FIPS on the next sync",
     "Cancel button for outbound pending peer requests: withdraws locally and notifies the recipient to drop their inbound row",
+    "Bidirectional /network peer requests — accept notifies the requester so both sides show the relationship without a manual second click",
     "Dedicated FIPS peer listener bound to fips0 ULA on port 5679 with a path whitelist (only signed endpoints are reachable from the mesh)",
-    "Deploy script now writes /opt/archipelago/build-info.txt on every deploy so the UI sidebar version never drifts from the binary again"
+    "Lazy-bind peer listener — fips.install post-onboarding activates the mesh without an archipelago restart",
+    "Self-add guard on peers.json so messages echoed back through federation can't leave a phantom self-peer entry",
+    "Multi-relay nostr profile publish — kind:0 broadcasts to every enabled relay in Manage Relays with per-relay accept/reject feedback",
+    "Profile avatar + banner upload via /api/blob on the Edit Profile dialog",
+    "nginx body-size limit raised to 256m on mesh/content/dwn peer paths (fixes 413 on attachments)",
+    "Deploy script writes /opt/archipelago/build-info.txt on every deploy so the UI sidebar version never drifts from the binary again",
+    "Deploy script forces sites-enabled to be a symlink to sites-available so config updates actually take effect"
   ],
   "components": [
     {
@@ -16,16 +24,16 @@
       "current_version": "1.4.0",
       "new_version": "1.5.0-alpha",
       "download_url": "https://git.tx1138.com/lfg2025/archy/raw/branch/main/releases/v1.5.0-alpha/archipelago",
-      "sha256": "b7527e53b373aba05013b35750f890e5f98c91be542cbe406fa55216cb6a6acc",
-      "size_bytes": 40020488
+      "sha256": "e3df7a68f31a1e76e072a27eac6c84599d340697a672ab0bd8f85e4d2b65ed71",
+      "size_bytes": 40078936
     },
     {
       "name": "archipelago-frontend-1.5.0-alpha.tar.gz",
       "current_version": "1.4.0",
       "new_version": "1.5.0-alpha",
       "download_url": "https://git.tx1138.com/lfg2025/archy/raw/branch/main/releases/v1.5.0-alpha/archipelago-frontend-1.5.0-alpha.tar.gz",
-      "sha256": "83fbacf3b0ba237cd78cc0be798f7d74d8aea5d62110a1eb6ecdc56f77cf505e",
-      "size_bytes": 53359792
+      "sha256": "2bf973eeb1998d4d9f829e54fd249c5a33625ee3d24a4abfc980ff86f3a3af51",
+      "size_bytes": 53358751
     }
   ]
 }