feat(audit): address batch 1 of missing scripts and enable fwupd

- Move 18 Hyprland/desktop scripts from features/desktop/scripts/ to packaged directories
- Add nomarchy.hardware.fwupd option (default false) and enable service
- Implement nomarchy-update-firmware wrapper for fwupdmgr
- Add hyprland, swayosd, and fwupd to nomarchy-system-scripts dependencies
- Update docs/SCRIPTS.md with 'kept' status for ported scripts

features/scripts/utils/nomarchy-update-firmware

@@ -0,0 +1,19 @@
+#!/usr/bin/env bash
+
+# Nomarchy Firmware Update Script
+# Wraps fwupdmgr to update hardware firmware.
+
+set -e
+
+echo "Checking for firmware updates..."
+if ! fwupdmgr get-updates; then
+    echo "No updates available or fwupd service not running."
+    exit 0
+fi
+
+if gum confirm "Apply firmware updates? (Requires a reboot to finalize some updates)"; then
+    fwupdmgr update
+    echo "Firmware update complete. Please reboot if prompted."
+else
+    echo "Update cancelled."
+fi