feat(install): idempotent per-host package installer with host-gated enablement

packages/aur.pkgs

@@ -0,0 +1,8 @@
+# packages/aur.pkgs — AUR-only desired state, installed via yay (bootstrapped
+# from the cachyos repo by install.sh). pkgbase names; runtime resolution by yay.
+
+oh-my-zsh-git       # system-wide oh-my-zsh at /usr/share/oh-my-zsh; sourced by .zshrc guard
+herdr-bin           # AI-agent terminal workspace manager (prebuilt binary)
+proton-pass         # Proton Pass desktop client
+handy-bin           # Handy voice dictation (AppImage repackaged as pkg)
+typora              # markdown editor

packages/blankpad.pkgs

@@ -0,0 +1,5 @@
+# packages/blankpad.pkgs — desired state for the AMD iGPU laptop (Cezanne/Vega).
+# amdgpu is in-kernel; the only GPU-relevant package is the CPU microcode,
+# pkgbase amd-u-code (split pkgname amd-ucode). No module options needed.
+
+amd-u-code

packages/common.pkgs

@@ -0,0 +1,31 @@
+# packages/common.pkgs — desired-state package list for EVERY host in the fleet.
+# install.sh installs (desired − installed); already-installed names are no-ops.
+# pkgbase names only; AUR lives in aur.pkgs.
+
+# terminals + shells
+ghostty
+zoxide
+
+# dev tooling
+neovim
+lazygit
+uv
+fzf
+ripgrep
+fd
+eza
+btop
+
+# system / fleet tooling
+yay                 # AUR helper bootstrap: ships in the cachyos repo; aur.pkgs installs need it
+git-lfs             # LFS smudge/clean for tracked wallpapers (see .gitattributes)
+swayidle            # idle lock + lid policy via swayidle-lock.service unit
+
+# desktop apps
+flameshot           # screenshot tool; bound to CTRL+Shift+1/2/3 in niri keybinds
+wl-clipboard        # clipboard provider flameshot copies through on wayland
+filezilla
+podman
+firefox
+vlc
+steam

packages/dankware.pkgs

@@ -0,0 +1,8 @@
+# packages/dankware.pkgs — desired state for the nvidia hybrid-GPU laptop.
+# GPU stack: open-kernel-module DKMS kernels; nvidia-utils/lib32/libxnvctrl/
+# nvidia-prime/nvidia-settings arrive as dependencies of these pkgbases.
+# Sleep fix (NVreg_UseKernelSuspendNotifiers=1 + nvidia-suspend/resume units)
+# ships with these packages; install.sh --apply enables the units idempotently.
+
+linux-cachyos-nvidia-open
+linux-cachyos-lts-nvidia-open