[dborup]

Adds an Infrastructure page inspired by the NashMesh Infrastructure page and its frontend implementation, adapted to our architecture. It has an admin-curated repeater set and a separate, activity-ranked shortlist of candidate repeaters. Suggestions are never auto-selected. The public page shows selected repeaters on a map with their current relay and bridge metrics.

Admin Select/Remove decisions use an authenticated, bounded file queue; only the ingestor writes the curated set into the main SQLite database, so it is included in the normal backup/restore lifecycle. Both server and ingestor validate that selected keys are known repeaters. The UI verifies the API key before showing controls, confirms each action, and keeps the key in memory only.

Validation: full server and ingestor Go suites; dbschema suite; sh test-all.sh (235/235); targeted Chromium desktop/mobile flow including wrong-key gating, explicit Select/Remove, and no mobile overflow. No deployment.

This PR is independent of #375 and #376.

[dborup]

Review feedback addressed (commit 705140e4)

1. Added COPY internal/infrastructure/ ../../internal/infrastructure/ to both server and ingestor builder sections before dependency download.
2. Reproduced the missing module copies on the previous Dockerfile and verified both sections now contain every required internal module. Both binaries cross-compiled successfully for Linux/amd64 from an isolated directory populated by the Dockerfile COPY rules.

Full Docker image validation was unavailable locally because the Docker daemon is not running. This change touches only two Dockerfile lines; it introduces no application or UI logic. CI will rerun the canonical COPY invariant check and remaining checks.

[dborup]

Closing per owner decision (2026-10-14): we will not maintain an admin-curated infrastructure list for now. The branch is kept, so the work can be revived later if that changes.