Capture this laptop's Omarchy customizations

Everything on top of a stock Omarchy 4.0.4-1 install, gathered so a second
machine can be brought to the same state: the ~/.config files that actually
differ from the shipped defaults, the three hand-built themes, the ten shell
plugins pinned to commits, the two custom scripts, two user units, and the
/etc drop-ins.

install.sh applies it all idempotently, backing up anything it overwrites.
capture.sh runs the other way so the repo stays the source of truth rather
than a snapshot that rots.

indie.herdr-hud's ten local-only commits ship as a git bundle plus a
working-tree patch, since they stay off the upstream PR deliberately.

Secrets, the dotfiles repo's territory (shell/git/mise), the remote-access
stack and aether-managed themes are all scoped out; README says why for each.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

system/sysctl.d/99-omarchy-handoff-arp.conf

@@ -0,0 +1,9 @@
+# Two NICs (Wi-Fi wlo1, dock ethernet enp0s13f0u3u4u3) share 192.168.1.0/24.
+# With the defaults (arp_ignore=0/arp_announce=0) the host answers ARP for any
+# local address on any interface, so the subnet's mapping collapses onto
+# whichever NIC replied last -- traffic aimed at the Wi-Fi IP lands on the dock,
+# and the Wi-Fi path silently never gets exercised.
+# 1 = only answer ARP for addresses configured on the receiving interface.
+# 2 = always use the best local address for the target subnet when announcing.
+net.ipv4.conf.all.arp_ignore = 1
+net.ipv4.conf.all.arp_announce = 2