Replace FOD npm install with fetchurl tarballs + manual assembly.
npm install is non-deterministic across systems, causing hash mismatches.

fetchurl downloads exact versioned tarballs from npm registry (always
identical), then we unpack them into the node_modules structure directly.

- Add version and deps options to package schema
- Fetch tarballs with fetchurl (deterministic per version)
- Assemble node_modules tree without npm
- Strip version/deps from settings.json (only needed for nix fetching)

Replace the long list of individual mail aliases with an extraRouters
catchall that redirects all @lassul.us mail to the same destinations.
Keep only lassulus@lassul.us as an explicit alias for the ACL.

Remove aidsballs.de (domain no longer exists, DNS returns NXDOMAIN).

The ACL already accepts all local_domains, and the catchall router
picks up anything the internet_aliases router doesn't match.