Keep source-evidence.json as local workflow material by ignoring it repository-wide and remove previously committed evidence files from application trees.
Remove the localhost default from simplex-smp-server so 1Panel users must enter a real public domain or IP during installation, and align the README and env samples with that requirement.
Add the official ghcr.io/jamiepine/voicebox:latest-cuda package as a latest-cuda version directory, keeping the same data/model persistence layout while adding the standard GPU reservation block used by existing appstore GPU variants.
Verification: strict validate-v2 for simplex latest/6.5.2 and voicebox latest/latest-cuda; fresh 1Panel v2 smoke for simplex latest and 6.5.2 with an explicit ADDR; CUDA runtime smoke intentionally skipped on this host because no GPU is available.
Add 1Panel app packages for CPA Manager, CPA Manager Plus, Docker Hub Proxy, kspeeder, LibreTranslate, OxiDNS, TREK, Voicebox, and SimpleX SMP Server using official images and upstream deployment references.
Keep at most one fixed numeric version plus latest per app, avoid duplicate keys already present in the appstore, and expose the useful runtime settings through data.yml where practical.
Validation: strict validate-v2 for every packaged version; fresh-panel smoke passed for Voicebox latest, SimpleX SMP Server latest, and SimpleX SMP Server 6.5.2; existing smoke reports retained for the rest of the batch.