configs/nym: fix entrypoint and host-side binary download for build

Drop unsupported --no-banner; COPY pre-fetched nym-node; ignore binary/env/data.

configs/nym/Containerfile

@@ -1,39 +1,26 @@
 # koopa-nym — nym-node (nym.com mixnet / NymVPN network)
-# Docs: https://nym.com/docs/operators/nodes/nym-node
+# Fetch binary on host first (see scripts/nym/build.sh), then:
+#   podman build -t localhost/koopa-nym:latest -f Containerfile .
 FROM docker.io/library/debian:bookworm-slim
 
 ENV DEBIAN_FRONTEND=noninteractive \
     NYM_HOME=/var/lib/nym \
     PATH=/usr/local/bin:$PATH
 
-# Pin via build-arg when a new binary is released:
-#   https://github.com/nymtech/nym/releases
-ARG NYM_NODE_VERSION=1.35.0
-ARG NYM_NODE_URL=""
-
 RUN apt-get update \
  && apt-get install -y --no-install-recommends \
-      ca-certificates curl ca-certificates-java \
-      libssl3 \
+      ca-certificates libssl3 \
  && rm -rf /var/lib/apt/lists/* \
  && mkdir -p /var/lib/nym /usr/local/bin
 
-# Prefer explicit URL; else GitHub release asset pattern for linux x86_64.
-RUN set -eux; \
-  if [ -n "$NYM_NODE_URL" ]; then \
-    curl -fsSL -o /usr/local/bin/nym-node "$NYM_NODE_URL"; \
-  else \
-    curl -fsSL -o /usr/local/bin/nym-node \
-      "https://github.com/nymtech/nym/releases/download/nym-binaries-v${NYM_NODE_VERSION}/nym-node"; \
-  fi; \
-  chmod +x /usr/local/bin/nym-node; \
-  /usr/local/bin/nym-node --version || true
+# Pre-downloaded on host into build context as ./nym-node
+COPY nym-node /usr/local/bin/nym-node
+RUN chmod +x /usr/local/bin/nym-node \
+ && /usr/local/bin/nym-node --version || true
 
 COPY entrypoint.sh /usr/local/bin/nym-entrypoint
 RUN chmod +x /usr/local/bin/nym-entrypoint
 
-# Defaults inside container (host maps different ports — see compose.yml)
 EXPOSE 1789/udp 1789/tcp 1790 8080 9000 51822/udp
-
 WORKDIR /var/lib/nym
 ENTRYPOINT ["/usr/local/bin/nym-entrypoint"]