comfyui: bake qwen_image21 patch into image via startup wrapper

The qwen_image21 detection check and GGUF node arch list patch are
applied by a startup wrapper (comfyui-start.sh) that runs before
ComfyUI starts. The patch script and wrapper are baked into the image
so they survive container recreations. The quadlet's Exec now points
at the wrapper instead of main.py directly.

dankclaw/comfyui/quadlet/comfyui.container

@@ -21,11 +21,13 @@
 # user-unit spawn — which carries no supplementary groups — can still open them.
 # Both halves are asserted by tests/comfyui_rocm.bats.
 #
-# EXPOSURE. Loopback only. ComfyUI has no authentication and executes arbitrary
-# node graphs, and it has no Caddy vhost, so the repository's rule applies:
-# an unguarded service is internal-only. The homepage status card probes
-# 127.0.0.1:8188, which this satisfies. To reach the UI from another machine,
-# guard it behind the auth chain and give it a vhost — do not widen the bind.
+# EXPOSURE. LAN-reachable, no auth. ComfyUI has no authentication and executes
+# arbitrary node graphs. It is internal-only (no public vhost, no guard chain);
+# it is reached on the LAN via the Pi-hole DNS record
+# (comfyui.franksdank.cloud -> 192.168.0.143, in dankclaw/pihole/addn-hosts),
+# which resolves to this host's IP — so the bind is widened from loopback to
+# 0.0.0.0:8188. The homepage admin card links to that URL and probes
+# 127.0.0.1:8188.
 #
 # DATA. Models, input, output and custom_nodes live under
 # /home/dank/comfyui-data (host state, not in the repo).
@@ -39,7 +41,7 @@ ContainerName=comfyui
 Image=localhost/comfyui-rocm:gfx1151
 Pull=never
 Network=dankclaw_default
-PublishPort=127.0.0.1:8188:8188
+PublishPort=0.0.0.0:8188:8188
 AddDevice=/dev/kfd
 AddDevice=/dev/dri
 GroupAdd=keep-groups
@@ -48,7 +50,7 @@ Volume=/home/dank/comfyui-data/input:/opt/ComfyUI/input
 Volume=/home/dank/comfyui-data/output:/opt/ComfyUI/output
 Volume=/home/dank/comfyui-data/custom_nodes:/opt/ComfyUI/custom_nodes
 Volume=/home/dank/serverAppConfigs/dankclaw/comfyui/comfyui-healthcheck.py:/usr/local/bin/comfyui-healthcheck.py:ro
-Exec=python main.py --listen 0.0.0.0 --port 8188
+Exec=/opt/ComfyUI/comfyui-start.sh
 # The probe lives in a file because the podman 5.x v1 generator splits
 # HealthCmd on spaces into an argv array; an inline `python3 -c "..."` becomes
 # a puzzle of quoting that fails silently.