packaging/iso: uninstall safety, fail-closed AUR updates, no sshd on live ISO

- tanin-greet.install: post_remove restores the previous greetd config —
  removing the package no longer leaves greetd pointing at a dead binary
- aur-autoupdate: skip packages when the AUR RPC is unreachable instead of
  building blind (fail closed)
- build-tanin-repo: per-package makepkg logs instead of >/dev/null
- live ISO: drop sshd.service enablement (root has an empty password on the
  live medium); encoded in bootstrap-profile.sh so it survives re-bootstrap
- gtklock config: de-personalize hardcoded /home/karim path, mark as
  not-yet-packaged reference
- tanin-desktop PKGBUILD: correct stale AUR-vs-extra comments (gtklock,
  awww, cliphist are in extra), document the eww-git provides=eww contract
- docs/distribution.md: mark SigLevel TrustAll as temporary/insecure, add
  repo-signing TODO (repo-add -s, SigLevel Required), tick done roadmap items
- tanin-calendar + niri-config.kdl: pending session work

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

packaging/tanin-calendar/PKGBUILD

@@ -1,20 +1,22 @@
 # Maintainer: Karim <karim@gabrielevarano.ch>
 #
-# tanin-calendar — TANINUX calendar app (GTK4 / libadwaita). A detailed agenda
-# over your calendars, read straight from Evolution Data Server (the same
-# backend GNOME Online Accounts feeds). Inherits the Fuji monochrome look from
-# tanin-libadwaita. German UI.
+# tanin-calendar — TANINUX calendar app (native GTK4, libadwaita-free). A
+# sidebar + month/week/day calendar over your calendars, read straight from
+# Evolution Data Server (the same backend GNOME Online Accounts feeds). Uses
+# the TANINUX design language (Iosevka chrome, Fuji accent) and tracks the live
+# accent via the global named colours. English UI, translatable via gettext.
 pkgname=tanin-calendar
 pkgver=0.1.0
 pkgrel=1
-pkgdesc="TANINUX calendar — GTK4/libadwaita agenda over Evolution Data Server (GNOME Online Accounts)"
+pkgdesc="TANINUX calendar — native GTK4 agenda over Evolution Data Server (GNOME Online Accounts)"
 arch=('any')
 url="https://taninux.kgva.ch"
 license=('GPL-3.0-or-later')
-depends=('python' 'python-gobject' 'gtk4' 'libadwaita'
-         'evolution-data-server' 'adwaita-icon-theme')
+depends=('python' 'python-gobject' 'gtk4'
+         'evolution-data-server' 'adwaita-icon-theme'
+         'ttc-iosevka-aile')
 optdepends=('gnome-online-accounts: add Google/Nextcloud/CalDAV calendars'
-            'tanin-libadwaita: Fuji monochrome theming for the app')
+            'taninux: live Fuji accent + light/dark theming for the app')
 
 package() {
   install -Dm755 "$startdir/tanin-calendar" \