chore: bump Synapse to 1.157.1; bump Ketesa to 1.4.0; 1.156.0:3 → 1.157.1:0

[helix-nine]

Summary

Monitor-cycle upstream bump for synapse-startos.

• Synapse v1.156.0 → v1.157.1 — dockerTag in startos/manifest/index.ts. Image ghcr.io/element-hq/synapse:v1.157.1 verified to resolve on ghcr. Pins v1.157.1 (the newest stable) rather than v1.157.0, since 1.157.1 fixes a config regression introduced by 1.157.0.
• Ketesa (admin dashboard) v1.3.0 → v1.4.0 — SYNAPSE_ADMIN_VERSION + SYNAPSE_ADMIN_CHECKSUM in the Makefile. Ships as a Makefile-downloaded release tarball (etkecc/ketesa), served by the package's nginx sidecar. Tarball downloaded and SHA-256 verified: 34351c13293e66ed3c024598ce48bbc7b347784b9e618b0ceaf1cb42a7a730b7.
• StartOS version 1.156.0:3 → 1.157.1:0 (startos/versions/current.ts, edited in place). Registry currently publishes 1.156.0:3, so 1.157.1:0 is free. No migration needed, so index.ts/other untouched.
• start-sdk already at the latest npm release 2.0.7 — no SDK bump. No *-startos git dependencies, so no lockfile churn.

Notable upstream changes

Synapse 1.157.x

• Fixes a 1.156.0 regression where application services using the legacy ephemeral-events registration flag stopped receiving ephemeral events (including the to-device messages used for encryption).
• Fixes reactivating a deactivated-and-erased user not restoring their profile (had broken login, display-name changes, and invitations).
• Adds exclude_rooms_from_presence and new presence-tuning options; tightens Sliding Sync locking to prevent repeated deadlocks.
• Removes experimental MSC3861 auth delegation in favor of the stable Matrix Authentication Service integration. Not used by this package — there is no OIDC/experimental_features/MSC3861 config in the wrapped homeserver config, so no action is required for StartOS installs.
• 1.157.1 fixes a config regression that rejected falsy experimental_features values.

Ketesa 1.4.0

• Login/discovery now honor wellKnownDiscovery: false and no longer rewrite the server URL you enter.
• User-list filters moved behind a Filter button; MAS mode now shows the admin flag and user type correctly.

Full upstream notes: https://github.com/element-hq/synapse/releases/tag/v1.157.1 · https://github.com/etkecc/ketesa/releases/tag/v1.4.0

Docs

No interface/action/volume/dependency/behavior change, and README.md/instructions.md carry no version numbers (name-only references) — both remain accurate as-is.

Test plan

• npm run check (tsc) green.
• ghcr.io/element-hq/synapse:v1.157.1 manifest resolves.
• Ketesa v1.4.0 ketesa.tar.gz downloaded, checksum matches the pinned value.
• 1.157.1:0 not already published on the registry (current published: 1.156.0:3).
• Release notes fact-checked against upstream changelogs; all four non-English locales verified faithful.
• make / s9pk pack — deferred to review per monitor-cycle policy.