Profiles: machines, roles and shared layers

The repo was one machine's capture. It is now a set of profiles built from
layers under profiles/:

  machines/  hp-laptop, macbook-air-m2, coder-desktop
  roles/     developer, devops, ai-agents
  features/  handoff (lan-mouse)
  shared     base, personal, personal-desktop

A profile resolves to its includes (depth first), any --roles, then itself;
for a path several layers provide, the last wins. install.sh --show prints
the layers and which one owns each file.

Hyprland settings no longer share a file: base's hyprland.lua loads
~/.config/hypr/layers/*.lua with Omarchy's own require_all, and bindings.lua
stays stock so nothing binds twice. Verified with Hyprland 0.56.2
--verify-config for all three profiles, plus a broken probe layer to prove
the directory is loaded.

packages.txt gains per-line arch (Arch Linux ARM lacks opencode, codex, mise,
shellcheck) and cmd= (skip when dotfiles' ~/.local/bin already provides the
command), and an [ignore] section that replaces capture.sh's hard-coded list.
Tab-separated records would have collapsed empty fields under read, so
package records use the unit separator.

hp-laptop: re-captured. monitors.lua catch-all scale is now 1, shell.json
has four new plugins, fix-stuck-displays has its connector-name fix,
navbar-cat is gone, plugin-manager and omarchy-phone are pinned, the
herdr-hud working tree is re-diffed and bin/herdr-web rides along. Its
handoff peer is now the Air (192.168.1.49); the old default list was the
HP's own addresses, written from the Air's side.

macbook-air-m2: captured read-only over SSH as it is (no themes, plugins
or bar changes). Its LAN_MOUSE_POINTER_SCALE=0.7 moves from the shared unit
into a lan-mouse.service.d drop-in in its own layer.

coder-desktop: the Omarchy settings covert-cloud's image used to patch in
by hand (Virtual-1 at 1920x1080, no animations, stay-awake, Retro 82 once),
for the image to apply at a pinned commit. Roles reach it per workspace via
install.sh --roles ... --no-clobber.

capture.sh writes each file back into the layer that owns it, and refuses
to run before the first layered install unless --force, since the old file
shapes would land in shared layers.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0153egowV1Xw2RNjZnSyZicc

profiles/machines/hp-laptop/packages.txt

@@ -0,0 +1,48 @@
+# HP laptop (omarchy-laptop) packages beyond the Omarchy 4.x baseline and the
+# packages its other layers already list.
+#
+# Format (every layer's packages.txt): "name [arch...] [cmd=command]  # why".
+#   arch     only install on these architectures (x86_64, aarch64)
+#   cmd=X    skip when command X is already on PATH (e.g. a dotfiles shim)
+# Sections:
+#   [repo]     official repos + the omarchy repo -> omarchy pkg add
+#   [aur]      AUR only                          -> omarchy pkg aur add
+#   [optional] installed here, not required for the desktop to work
+#   [ignore]   installed here on purpose but not managed (capture.sh stays quiet)
+
+[repo]
+# --- hardware: Intel + an Anker USB-C dock ---
+linux-omarchy            # kernel this install actually boots
+linux-omarchy-headers    # needed to build out-of-tree modules against it
+intel-ucode              # CPU microcode
+vulkan-intel             # Intel Vulkan driver
+lib32-vulkan-intel       # 32-bit Vulkan, for Steam/Proton
+sof-firmware             # Sound Open Firmware - required for this laptop's audio
+thermald                 # Intel thermal daemon; without it the CPU throttles hard
+zram-generator           # compressed swap in RAM
+
+# --- audio: full PipeWire stack with the Pulse/JACK/ALSA shims ---
+pipewire-pulse
+pipewire-alsa
+pipewire-jack
+libpulse
+gst-plugin-pipewire
+
+# --- desktop / input ---
+python-evdev             # input tooling used while debugging lan-mouse (not required by it)
+wayland-utils            # wayland-info, used when debugging outputs
+ghostty                  # terminal (alongside Omarchy's default)
+
+# --- apps ---
+1password
+1password-cli            # `op`, which the dotfiles repo's secrets module uses
+bun-bin
+
+[optional]
+steam                    # games; pulls a large 32-bit dependency tree
+
+[ignore]
+# toolchain/base, present on any Omarchy install or pulled in as a dependency
+base base-devel sudo omarchy mkinitcpio linux-firmware efibootmgr devtools cmake ninja
+# the remote-access stack, out of this repo's scope
+wayvnc sunshine freerdp remmina omarchy-remote-desktop-backend pipewire-debug