feat(albyhub): vendor v1.24.0 LND-only, no-frontend build

Replace the nixpkgs albyhub overrideAttrs patch-chain with a fully
vendored package at packages/albyhub for v1.24.0.

- modules/core/sovran-hub.nix: bump fallback version 1.8.0 -> 1.24.0
- modules/nwc-wallets.nix: build via pkgs.callPackage ../packages/albyhub
- packages/albyhub:
  - drop 0002-isolated-invoice-app-id.patch (fixed upstream)
  - add 0004-lnd-only.patch: strip LDK/Bark/Cashu/CLN/Phoenix backends
    from service/start.go, leaving only the LND case
  - add 0005-no-frontend.patch: remove //go:embed dist and the
    frontend handler registration
  - add default.nix: buildGoModule for v1.24.0 with no nodejs/yarn/
    bark-ffi-go/ldk-node deps (only stdenv.cc.cc), subPackages cmd/http

Keeps 0001-private-route-hints and 0003-loopback-bind-host. Does not
touch flake.nix, VERSION, or CHANGELOG.

packages/albyhub/0005-no-frontend.patch

@@ -0,0 +1,45 @@
+diff --git a/frontend/frontend.go b/frontend/frontend.go
+index 203dd9b..9c7f6da 100644
+--- a/frontend/frontend.go
++++ b/frontend/frontend.go
+@@ -1,26 +1,7 @@
+ package frontend
+ 
+ import (
+-	"embed"
+-	"net/http"
+-
+ 	"github.com/labstack/echo/v4"
+-	"github.com/labstack/echo/v4/middleware"
+ )
+ 
+-//go:embed dist
+-var embeddedReactAssets embed.FS
+-
+-func RegisterHandlers(e *echo.Echo) {
+-	e.Use(middleware.StaticWithConfig(middleware.StaticConfig{
+-		Skipper: nil,
+-		// Root directory from where the static content is served.
+-		Root: "dist",
+-		// Enable HTML5 mode by forwarding all not-found requests to root so that
+-		// SPA (single-page application) can handle the routing.
+-		HTML5:      true,
+-		Browse:     false,
+-		IgnoreBase: false,
+-		Filesystem: http.FS(embeddedReactAssets),
+-	}))
+-}
++func RegisterHandlers(e *echo.Echo) {}
+diff --git a/http/http_service.go b/http/http_service.go
+index 63d0ffc..0621bf5 100644
+--- a/http/http_service.go
++++ b/http/http_service.go
+@@ -114,8 +114,6 @@ func (httpSvc *HttpService) RegisterSharedRoutes(e *echo.Echo) {
+ 	e.POST("/api/backup", httpSvc.createBackupHandler, unlockRateLimiter)
+ 	e.GET("/logout", httpSvc.logoutHandler)
+ 
+-	frontend.RegisterHandlers(e)
+-
+ 	// restricted routes
+ 	// Configure middleware with the custom claims type
+ 	jwtConfig := echojwt.Config{