fix: bitcoin rpcallowip IPv4, babylon BLS pre-create, tac peers+cosmos RPC

- Add -rpcallowip=0.0.0.0/0 family-wide via bitcoind template regen
- Pre-create empty-password BLS key in babylon init.sh (v4.3.0 EOF fix)
- TAC: seeds+persistent_peers, CometBFT :26657 traefik, protocol cosmos

Co-authored-by: Cursor <cursoragent@cursor.com>

babylon/scripts/init.sh

@@ -25,6 +25,13 @@ else
   ct_log "already initialized, continuing"
 fi
 
+# v4.x start prompts for a BLS password if no key exists; RPC replicas never sign
+# checkpoints, so pre-create an empty-password key before the first start.
+if [ ! -f "$CONFIG_DIR/bls_key.json" ]; then
+  ct_log "pre-creating BLS key (no password — RPC replica)"
+  babylond create-bls-key --home "$HOME_DIR" --no-bls-password
+fi
+
 # Serve RPC on all interfaces (dshackle/traefik upstream); default is 127.0.0.1.
 sed -i '/^\[rpc\]/,/^\[/{s|^laddr = .*|laddr = "tcp://0.0.0.0:26657"|}' "$CONFIG_DIR/config.toml"