packaging/iso: uninstall safety, fail-closed AUR updates, no sshd on live ISO

- tanin-greet.install: post_remove restores the previous greetd config —
  removing the package no longer leaves greetd pointing at a dead binary
- aur-autoupdate: skip packages when the AUR RPC is unreachable instead of
  building blind (fail closed)
- build-tanin-repo: per-package makepkg logs instead of >/dev/null
- live ISO: drop sshd.service enablement (root has an empty password on the
  live medium); encoded in bootstrap-profile.sh so it survives re-bootstrap
- gtklock config: de-personalize hardcoded /home/karim path, mark as
  not-yet-packaged reference
- tanin-desktop PKGBUILD: correct stale AUR-vs-extra comments (gtklock,
  awww, cliphist are in extra), document the eww-git provides=eww contract
- docs/distribution.md: mark SigLevel TrustAll as temporary/insecure, add
  repo-signing TODO (repo-add -s, SigLevel Required), tick done roadmap items
- tanin-calendar + niri-config.kdl: pending session work

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

packaging/gtklock/config.ini

@@ -1,8 +1,16 @@
 # gtklock — TANINUX lockscreen config (Fuji greeter look).
 # glib keyfile format. gtklock is launched as: gtklock -d -c <this file>
+#
+# NOTE: this file is NOT yet wired into any package — it is a reference/template.
+# Nothing installs or reads it at the moment (see the tanin-desktop deps: gtklock
+# is pulled from extra, but no TANINUX package ships this config).
 [main]
-# stylesheet + wallpaper-as-css-background live next to this file
-style=/home/karim/.config/gtklock/gtklock.css
+# stylesheet + wallpaper-as-css-background live next to this file.
+# gtklock's keyfile does NOT expand ~ or $HOME reliably, so `style=` needs an
+# absolute path. Point it at the actual user's gtklock.css, e.g.
+#   style=/home/<user>/.config/gtklock/gtklock.css
+# (left commented on purpose — a hardcoded /home/<name> would only work for one user).
+#style=/home/<user>/.config/gtklock/gtklock.css
 # modules (system .so, suffix optional): user avatar+name, and power buttons
 modules=userinfo;powerbar
 # built-in clock — time over date, like the greeter's centre clock