Fix/pod public html bind mount (#30)

* feat(pods/admin): root admin alias, default-caps cleanup, pod rebuild script

- auth: add `root` as an admin-console route alias (alongside admin/sysop);
  still gated by $AGENTBBS_ADMINS — the name confers nothing on its own.
- pods: drop the now-redundant tuneApt apt-sandbox hack. Rootless podman keeps
  its default capability set, so apt/chown/su work without disabling the
  download sandbox.
- scripts/rebuild-pods.sh: recreate all member pods (keeps home volumes) so
  they pick up the current container profile on next `ssh pod@`.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* feat(arcade,ui): 80s arcade classics + shared menu theme

Arcade games (PRD §5.1), generalizing the sandboxed-PTY DOOM path into an
external-game registry: Space Invaders (nInvaders), Pac-Man (pacman4console),
Tetris (tint/vitetris), Moon Patrol (moon-buggy). Binaries resolve from
assets/bin, PATH, then /usr/games, so a distro install or a hand-built binary
lights each game up; missing games are skipped with a discovery hint. Installed
on the host via `scripts/fetch-assets.sh --arcade` (apt), wired into setup.sh
behind FETCH_ARCADE (default on).

UI: new shared ui.Theme.MenuItem widget (accent cursor + badge, description
shown only for the focused row) adopted by the hub and arcade menus; the hub
groups rows under Features/Sessions headers and the arcade under
DOOM/ARCADE/BUILT-IN.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

internal/news/tui.go

@@ -8,15 +8,16 @@ import (
 	"github.com/charmbracelet/lipgloss"
 	"github.com/charmbracelet/ssh"
 	"github.com/dustin/go-nntp"
+
+	"github.com/profullstack/agentbbs/internal/ui"
 )
 
 var (
-	nTitle = lipgloss.NewStyle().Bold(true).Foreground(lipgloss.Color("#c084fc"))
-	nSel   = lipgloss.NewStyle().Foreground(lipgloss.Color("#0b1020")).Background(lipgloss.Color("#38bdf8"))
-	nMeta  = lipgloss.NewStyle().Foreground(lipgloss.Color("241"))
-	nFrom  = lipgloss.NewStyle().Foreground(lipgloss.Color("#4ade80"))
-	nErr   = lipgloss.NewStyle().Foreground(lipgloss.Color("203"))
-	nHint  = lipgloss.NewStyle().Foreground(lipgloss.Color("244"))
+	theme = ui.New(ui.Purple)
+	nSel  = lipgloss.NewStyle().Foreground(lipgloss.Color("#0b1020")).Background(ui.Cyan)
+	nMeta = ui.Dim
+	nFrom = lipgloss.NewStyle().Foreground(ui.Green)
+	nErr  = ui.Danger
 )
 
 // RunReader connects the member to the loopback NNTP server and drives the
@@ -311,7 +312,7 @@ func (m *model) frame(header, body, hint string) string {
 		status = "\n" + nMeta.Render(m.status)
 	}
 	return lipgloss.NewStyle().Padding(0, 1).Render(
-		nTitle.Render(header) + "\n\n" + body + status + "\n\n" + nHint.Render(hint))
+		theme.Title(header) + "\n\n" + body + status + "\n\n" + ui.KeyBar(hint))
 }
 
 func (m *model) viewGroups() string {