feat(dotfiles): import env layer as stow-style packages with deploy.sh

Import Dankware's environment layer into the repo as home-relative package
trees (niri, gtk-3/4, ghostty, alacritty, fish, zsh, bash, profile,
systemd-user, dconf). scripts/deploy.sh implements stow-equivalent semantics
(check|adopt|sync modes): identical files adopt to symlinks, new files link,
divergent files quarantine-and-replace under .quarantine/<host>/<ts>/ (gitignored).
zz-<hostname> override packages deploy last with override semantics.

Secrets never enter git: GITEA_TOKEN moved from .zshrc into untracked
~/.config/environment.d/secrets.env (0600); tracked .zshrc sources it
guarded. core.hooksPath armed by deploy.sh so the pre-commit secret gate is
live on every machine that deploys.

dotfiles/ghostty/.config/ghostty/auto/theme.ghostty

@@ -0,0 +1 @@
+theme = Retro Legends

dotfiles/ghostty/.config/ghostty/config.ghostty

@@ -0,0 +1,75 @@
+# Ghostty Configuration
+# Clean, simplified config for Terminess Nerd Font Mono with Catppuccin Mocha
+
+# ── Theme ──────────────────────────────────────────────────────────────────────
+theme = "Retro Legends"
+
+# ── Font ───────────────────────────────────────────────────────────────────────
+font-family = "Terminess Nerd Font Mono"
+font-size = 14
+font-feature = "calt=1"
+font-feature = "ss01=1"
+font-feature = "ss02=1"
+font-feature = "ss03=1"
+font-feature = "ss04=1"
+font-feature = "ss05=1"
+font-feature = "ss06=1"
+font-feature = "ss07=1"
+font-feature = "ss08=1"
+font-feature = "ss09=1"
+font-feature = "ss10=1"
+font-feature = "zero=1"
+font-feature = "onum=1"
+font-feature = "liga=1"
+
+# ── Appearance ─────────────────────────────────────────────────────────────────
+window-padding-x = 12
+window-padding-y = 12
+window-padding-balance = true
+window-padding-color = extend
+background-opacity = 0.92
+background-blur = 25
+unfocused-split-opacity = 0.7
+window-theme = ghostty
+window-titlebar-background = "#181825"
+window-titlebar-foreground = "#cdd6f4"
+
+# ── Scrollback & Scrolling ─────────────────────────────────────────────────────
+scrollback-limit = 50000000
+scroll-to-bottom = keystroke,no-output
+mouse-scroll-multiplier = precision:2,discrete:6
+
+# ── Selection & Mouse ──────────────────────────────────────────────────────────
+mouse-hide-while-typing = true
+
+# ── Bell ───────────────────────────────────────────────────────────────────────
+bell-features = attention,title
+
+# ── Palette ────────────────────────────────────────────────────────────────────
+palette-generate = true
+
+# ── Icon Adjustment ────────────────────────────────────────────────────────────
+adjust-icon-height = -3
+
+# ── Shell Integration ──────────────────────────────────────────────────────────
+shell-integration = detect
+shell-integration-features = cursor,sudo,title,ssh-env,ssh-terminfo,path
+
+# ── Link Previews ──────────────────────────────────────────────────────────────
+link-url = true
+link-previews = osc8
+
+# ── Notifications ──────────────────────────────────────────────────────────────
+notify-on-command-finish = unfocused
+notify-on-command-finish-action = bell,notify
+notify-on-command-finish-after = 3s
+
+# ── Resize Overlay ─────────────────────────────────────────────────────────────
+resize-overlay = after-first
+resize-overlay-position = center
+resize-overlay-duration = 500ms
+
+# ── Keybinds ───────────────────────────────────────────────────────────────────
+# Quick terminal toggle — uses the quick-terminal action
+# Note: quick-terminal action toggles the quick terminal popup
+# keybind = super+grave=quick-terminal