ova: fix swap, auto-launch setup wizard, add password change step

- Replace direct storage layout with explicit partitioning (no swap)
- Setup wizard now auto-launches on TTY1 via getty override instead
  of a separate systemd service that competed with console output
- Add step 1/7: prompt user to change default zroc password on first boot
- Update Makefile for QEMU-based build (was referencing old ovftool flow)
- Add backend package-lock.json for Docker build

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

zroc-ova/scripts/05-cleanup.sh

@@ -29,6 +29,7 @@ dd if=/dev/zero of=/ZERO bs=4M status=progress 2>/dev/null || true
 rm -f /ZERO
 sync
 
+# Zero swap if present (appliance is built without swap by default)
 SWAP_DEV=$(swapon --show=NAME --noheadings 2>/dev/null | head -1)
 if [[ -n "$SWAP_DEV" ]]; then
   swapoff "$SWAP_DEV"