tac: add TAC mainnet archive profile with EVM JSON-RPC upstream

- Add archive profile (pruning=nothing) for tacchaind
- Change client_rpc_port from 26657 (CometBFT) to 8545 (EVM JSON-RPC)
- Update Dockerfile to download pre-built binary from GitHub releases v1.6.0
- Verify binary against checksums.txt
- Update init.sh to support PRUNING env var (nothing for archive, default for pruned)
- Update peers from NETWORKS.md
- Add archive snapshot URL note
- Traefik routes to EVM JSON-RPC port 8545 for both pruned and archive

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>

tac/tacchaind/tac-spb-tacchaind-pruned.yml

@@ -53,7 +53,8 @@ services:
       - 14331:14331
       - 14331:14331/udp
     expose:
-      - 26657
+      - 8545
+      - 8546
       - 6065
     environment:
       - API=eth,net,web3,txpool,debug
@@ -64,6 +65,7 @@ services:
       - MONIKER=d${DOMAIN:-local}
       - P2P_PORT=14331
       - PERSISTENT_PEERS=9c32b3b959a2427bd2aa064f8c9a8efebdad4c23@206.217.210.164:45130,04a2152eed9f73dc44779387a870ea6480c41fe7@206.217.210.164:45140,5aaaf8140262d7416ac53abe4e0bd13b0f582168@23.92.177.41:45110,ddb3e8b8f4d051e914686302dafc2a73adf9b0d2@23.92.177.41:45120
+      - PRUNING=default
       - STATESYNC_RPC=https://spb.tendermint.rpc.tac.build
     restart: unless-stopped
     stop_grace_period: 5m
@@ -80,7 +82,7 @@ services:
       - prometheus-scrape.path=/metrics
       - traefik.enable=true
       - traefik.http.middlewares.tac-spb-tacchaind-pruned-stripprefix.stripprefix.prefixes=/tac-spb
-      - traefik.http.services.tac-spb-tacchaind-pruned.loadbalancer.server.port=26657
+      - traefik.http.services.tac-spb-tacchaind-pruned.loadbalancer.server.port=8545
       - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned.tls.certresolver=myresolver}
       - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned.rule=Host(`$DOMAIN`) && (Path(`/tac-spb`) || Path(`/tac-spb/`))}
@@ -89,7 +91,7 @@ services:
       - traefik.http.routers.tac-spb-tacchaind-pruned.priority=50   # gets any request that is not GET with UPGRADE header
       - traefik.http.routers.tac-spb-tacchaind-pruned-ws.priority=100   # answers GET requests first
       - traefik.http.middlewares.tac-spb-tacchaind-pruned-set-ws-path.replacepath.path=/websocket
-      - traefik.http.services.tac-spb-tacchaind-pruned-ws.loadbalancer.server.port=26657
+      - traefik.http.services.tac-spb-tacchaind-pruned-ws.loadbalancer.server.port=8546
       - traefik.http.routers.tac-spb-tacchaind-pruned-ws.service=tac-spb-tacchaind-pruned-ws
       - traefik.http.routers.tac-spb-tacchaind-pruned.service=tac-spb-tacchaind-pruned
       - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned-ws.entrypoints=websecure}