Consolidate all paths to plugin flash dir, fix watchdog 7.3 triggers

- Move SCRIPTS_DIR/DATA_DIR/STATE_DIR from appdata to /boot/config/plugins/varaverk
- All state files now in STATE_DIR (no more /tmp or /boot/config root writes)
- Bootstrap: Gitea-first clone with GitHub fallback, no array dependency
- varaverk.cfg seeded with Gitea connection settings
- .gitignore: add State_Files/, varaverk.cfg, varaverk-*.txz
- Partnership/transcode/fallback scripts use STATE_DIR variables
- PHP config.php: DATA_DIR/STATE_DIR constants, VV_SETUP_STATE_FILE dynamic
- deploy.sh PROD_ROOT updated to plugin flash dir

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Partnership/partnership_onboard.sh

@@ -204,7 +204,7 @@ START=$(date +%s)
 write_onboard_phase() {
     local target_id="$1" phase="$2"
     local key="${target_id}_PHASE${phase}_DONE"
-    local state_file="/boot/config/varaverk_setup.db"
+    local state_file="${VARAVERK_SETUP_FILE:-${STATE_DIR:-/boot/config}/varaverk_setup.db}"
     [[ "$DRY_RUN" == true ]] && { warn "DRY RUN — would write ${key}=true"; return 0; }
     if grep -q "^${key}=" "$state_file" 2>/dev/null; then
         sed -i "s|^${key}=.*|${key}=true|" "$state_file"
@@ -497,7 +497,7 @@ if [[ "$AM_MIRROR" == true ]]; then
         OWNER_SCRIPTS_DIR=$(timeout "$SSH_TIMEOUT" ssh -i "$SSH_KEY" \
             -o ConnectTimeout="$SSH_TIMEOUT" -o BatchMode=yes root@"$OWNER_IP" \
             'grep SCRIPTS_DIR /boot/config/plugins/varaverk/varaverk.cfg 2>/dev/null | cut -d= -f2 | tr -d "\"'"'"'" 2>/dev/null' 2>/dev/null | tr -d '[:space:]')
-        OWNER_SCRIPTS_DIR="${OWNER_SCRIPTS_DIR:-/mnt/user/appdata/Varaverk}"
+        OWNER_SCRIPTS_DIR="${OWNER_SCRIPTS_DIR:-/boot/config/plugins/varaverk}"
 
         if [[ "$DRY_RUN" == true ]]; then
             warn "DRY RUN — would SSH to $OWNER ($OWNER_IP) and trigger Phase 2"
@@ -592,9 +592,10 @@ elif [[ "$PHASE1_ONLY" == true ]]; then
                 # Write key-ready flag so UI can show the manual-install state
                 [[ "$DRY_RUN" == false ]] && {
                     local kflag="${MIRROR_ID}_KEY_READY"
-                    grep -q "^${kflag}=" /boot/config/varaverk_setup.db 2>/dev/null \
-                        && sed -i "s|^${kflag}=.*|${kflag}=true|" /boot/config/varaverk_setup.db \
-                        || echo "${kflag}=true" >> /boot/config/varaverk_setup.db
+                    local _setup_f="${VARAVERK_SETUP_FILE:-${STATE_DIR:-/boot/config}/varaverk_setup.db}"
+                    grep -q "^${kflag}=" "$_setup_f" 2>/dev/null \
+                        && sed -i "s|^${kflag}=.*|${kflag}=true|" "$_setup_f" \
+                        || echo "${kflag}=true" >> "$_setup_f"
                 }
             fi
             STEP_SSH_OK=false