docs: mark StartOS as unsupported in compatibility tables (#202)

StartOS 0.4.0 LXC subcontainer isolation architecture prevents cross-package
egress encapsulation, making it impossible for a third-party package to route
outbound peer node traffic through WireGuard without exposing residential IP.

Author: TrezorHannes

README.md

@@ -38,14 +38,14 @@ The Lightning Network needs **fast, reliable, discoverable** nodes for efficient
 | Platform | Type | LND | CLN | Installation Method |
 |:---|:---|:---:|:---:|:---|
 | **Umbrel** (umbrelOS 1.0+) | Docker App | ✅ | ✅ | **Native Umbrel App** ([Community App Store](https://github.com/Tunnelsats/ts-umbrel-app) / Official Review Pending) |
-| **StartOS** (StartOS 0.3.5 & 0.4.0+) | Service Package | ✅ | ✅ | **Native `.s9pk` Package** ([tunnelsats-startos repo](https://github.com/Tunnelsats/tunnelsats-startos) / Official Store Pending) |
 | **RaspiBlitz** (v1.11+) | Systemd | ✅ | ✅ | Host Script (`tunnelsats.sh`) |
 | **Bare Metal** (Debian/Ubuntu) | Systemd | ✅ | ✅ | Host Script (`tunnelsats.sh`) |
 | **myNode** (v0.3+) | Systemd | ⚠️ | ⚠️ | Host Script (`tunnelsats.sh` - Experimental) |
+| **StartOS** (Start9) | Service Package | ❌ | ❌ | ❌ **Unsupported** (LXC isolation prevents cross-package egress routing) |
 
 > ℹ️ **Security Architecture Note**:
 > The `tunnelsats.sh` bash installer is designed for bare-metal / systemd nodes (RaspiBlitz, RaspiBolt, MiniBolt, myNode).
-> Due to the strict container sandboxing and security infrastructure of **Umbrel** and **StartOS**, manual host script execution is unsupported on those platforms — please use their respective native App / Service installations.
+> Due to container sandboxing, manual host script execution is unsupported on **Umbrel** — please use the native [Umbrel App](https://github.com/Tunnelsats/ts-umbrel-app) installation. StartOS is unsupported as its LXC architecture does not allow third-party packages to encapsulate peer node egress.
 
 See [scripts/README.md](./scripts/) for detailed compatibility info.
 

scripts/README.md

@@ -22,15 +22,15 @@ sudo bash tunnelsats.sh [install|uninstall|status|restart|pre-check]
 
 ## Compatibility & Testing Status
 
-We are iteratively validating `tunnelsats.sh` across various Node OS platforms. Note that `tunnelsats.sh` is designed for systemd / bare-metal environments, whereas **Umbrel** and **StartOS** use native containerized app packages.
+We are iteratively validating `tunnelsats.sh` across various Node OS platforms. Note that `tunnelsats.sh` is designed for systemd / bare-metal environments, whereas **Umbrel** uses a native containerized app package.
 
 | Hardware/Platform | Node OS | OS Version | Host Script (`tunnelsats.sh`) | Native App / Package |
 | :--- | :--- | :--- | :---: | :---: |
 | Raspberry Pi / PC | **Umbrel** | umbrelOS 1.0+ | N/A (Use Native App) | ✅ Native Umbrel App (Community Store / Official Review Pending) |
-| Any Hardware | **StartOS (Start9)** | 0.3.5 & 0.4.0+ | N/A (Use Native Package) | ✅ Native `.s9pk` Package (Sideload / Official Store Pending) |
 | Raspberry Pi | **RaspiBlitz** | v1.11.x | ✅ Supported | N/A |
 | PC / VPS | **Bare Metal** | Debian 12 / Ubuntu | ✅ Supported | N/A |
 | Pi / PC (x86) | **myNode** | v0.3.x | ⚠️ Experimental | N/A |
+| Any Hardware | **StartOS (Start9)** | 0.3.5 & 0.4.0+ | ❌ Unsupported | ❌ Unsupported (LXC isolation prevents cross-package egress routing) |
 
 **Legend:**
 - ✅ **Verified / Supported**: Tested and working.