iso: resolve jack/iptables provider prompts; calamares + waypaper deps in [tanin]

- packages.x86_64: add pipewire-jack + iptables (non-interactive provider choice)
- [tanin] now also hosts calamares, python-screeninfo, python-imageio-ffmpeg
  (waypaper's AUR deps) — all built without sudo

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

distro/camel.toml

@@ -147,7 +147,7 @@ status = "in [tanin]"
 [[packages.rebuilt_aur]]
 name   = "calamares"
 reason = "GUI installer for the ISO — AUR-only, not in official repos"
-status = "TODO — heavy Qt build; rebuild into [tanin] (finish-tanin-repo.sh / BUILD.md one-liner)"
+status = "in [tanin] (built without sudo — all makedeps were present)"
 
 [[packages.rebuilt_aur]]
 name   = "paru (or paru-bin)"