feat(arch-layer,scripts): linux-gated desktop configs + package install scripts

niri (exact_config.d, scripts), noctalia (plugins excluded — runtime
state with embedded token), fontconfig, mimeapps.list,
niri-dynamic-workspaces, systemd user unit files (enable-state not
managed; only nirinit enabled by run_once), niri-launch vendored from
/usr/bin (unowned hand-written script, shellcheck warnings pre-existing).

Scripts: packages (pacman --needed + paru, brew on darwin, root-safe,
keyed on packages.yaml hash), gh extensions (idempotent), user services
(linux), post (tpm clone, bat cache, fc-cache). All shellcheck-clean.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

dot_config/niri-dynamic-workspaces/config.toml

@@ -0,0 +1,76 @@
+[general]
+workspace_prefix = "ndw-"    # prefix for dynamic workspace names
+default_programs = ["kitty"] # programs launched when creating any new workspace
+auto_delete_empty = true     # daemon: auto-delete empty unfocused workspaces
+hover_preview = false        # preview workspaces by hovering over cards
+layout = "qwerty"            # keyboard layout for the overlay (see table below)
+
+[keybinds]
+close = ["Escape", "Ctrl+c", "Ctrl+w", "Ctrl+q"] # keys to dismiss the overlay
+
+[workspace.y] # digit workspaces work too
+name = "YouTube"
+programs = ["vicinae vicinae://launch/applications/WebApp-YouTube7881"]
+
+[workspace.m] # digit workspaces work too
+name = "Messages"
+programs = [
+  "vicinae vicinae://launch/applications/beeper",
+  "vicinae vicinae://launch/applications/org.gnome.Evolution",
+]
+
+[workspace.l] # digit workspaces work too
+name = "Linear"
+programs = ["vicinae vicinae://launch/applications/WebApp-Linear3312"]
+
+[workspace.d] # digit workspaces work too
+name = "Chrome"
+programs = ["vicinae vicinae://launch/applications/google-chrome"]
+
+[workspace.x] # digit workspaces work too
+name = "Twitter"
+programs = ["vicinae vicinae://launch/applications/WebApp-X1000"]
+
+[workspace.h]
+name = "Herdr"
+programs = ["kitty --class kitty-herdr -e herdr"]
+
+# digit workspaces work too
+[workspace.f]
+name = "Frontend"
+programs = [
+  "kitty-nvim walletbases/website",
+  "kitty-claude walletbases/website",
+]
+
+[workspace.c]
+name = "Contracts"
+programs = [
+  "kitty-nvim walletbases/contracts",
+  "kitty --class kitty-claude -d /home/prad/Developer/github.com/walletbases/contracts -e claude",
+]
+
+
+[workspace.b]
+name = "Backend"
+programs = [
+  "kitty --class kitty-nvim -d /home/prad/Developer/github.com/walletbases/backend -e nvim",
+  "kitty --class kitty-claude -d /home/prad/Developer/github.com/walletbases/backend -e claude",
+]
+
+[workspace.s]
+name = "SDK"
+programs = [
+  "kitty --class kitty-nvim -d /home/prad/Developer/github.com/walletbases/core -e nvim",
+  "kitty --class kitty-claude -d /home/prad/Developer/github.com/walletbases/core -e claude",
+]
+
+[workspace.w]
+name = "Web"
+programs = [
+  "kitty --class kitty-nvim -d /home/prad/Developer/github.com/walletbases/website -e nvim",
+  "kitty --class kitty-claude -d /home/prad/Developer/github.com/walletbases/website -e claude",
+]
+
+[hooks]
+on_create = ['''~/.config/niri/scripts/ndw-route-workspace.sh''']