test+fix: close #14, V2 #57 live install entry, #41 float slice

- #14: first scheduled lock bump confirmed (8fded63 nomarchy-bump Mon
  05:20 UTC 2026-07-06); remove queue item.
- #57 V2: checks.live-install-entry builds nomarchy-live HM gen and
  asserts Install Nomarchy.desktop + installer bin + menu gate.
- #41: float/center hyprpolkitagent + pinentry-qt from package app-ids;
  capture-float-classes.nix harness (softGL empty); residual portal
  class stays NEXT [blocked:hw]. HARDWARE-QUEUE confirm steps.

Verified: live-install-entry + windowrule-syntax green.

agent/BACKLOG.md

@@ -28,40 +28,23 @@ in [`docs/ROADMAP.md`](../docs/ROADMAP.md); map in
 
 ## NEXT
 
-### 14. Automated lock bumps — confirm the first real run
-Slices b+c shipped 2026-07-05 (`.gitea/workflows/bump.yml`): weekly
-schedule (Mon 05:17 UTC) + `workflow_dispatch` as the security
-fast-lane; `nix flake update` → eval gate → pathspec-limited lock
-commit pushed to `main` on green (that push triggers check.yml as the
-second net). Update/commit/push logic simulated locally end-to-end in
-a scratch clone, incl. a real update; today's bumped lock evals green.
-Remaining (not confirmable from a session): the first scheduled or
-dispatched run must land — watch that the runner picks up the cron and
-that the Actions token can push. Then delete this item. Item 20's KVM
-runner later upgrades the gate from eval-only to the VM suite.
-
 ### 20. KVM runner → VM suite in CI `[human]`
 The remaining stretch of the CI item — checks-on-push is live and
 **green** (run #58; runner = gitea/act_runner docker, eval tier).
 Register a second runner on a host with `/dev/kvm` + nix (host-mode
 label `nix-kvm`), then an agent uncomments the workflow's `vm-checks`
 job: the `checks.*` VM suite + real toplevel/HM builds on every push
-that later upgrades item 14's bump gate from eval-only to the full suite.
+that later upgrades the bump gate from eval-only to the full suite.
 
-### 41. Floating-window audit — remaining (needs hardware class checks)
-(Raised by Bernardo, 2026-07-07 — item 11.) Broaden the `windowrule`
-float set beyond the conservative first cut.
-_Conservative cut shipped 2026-07-07 (iteration #63, on Bernardo's "take a
-conservative approach"):_ float + center the mixer (item 35), **blueman**
-(manager/adapters) and **system-config-printer** — the only shipped,
-unambiguous config dialogs whose classes are confident. **Remaining
-candidates, deliberately deferred because their window class can't be
-verified headlessly** (a guessed class = dead rule): the polkit auth
-prompt (hyprpolkitagent — no discoverable class in the package), GTK
-file-chooser portals (`xdg-desktop-portal-gtk`), and any pinentry dialog.
-Next slice: on hardware, run `hyprctl clients` while each is open, read
-the real `class`, then append rules. Also revisit whether blueman/s-c-p
-actually float once seen (regex tolerance for the `.…-wrapped` form).
+### 41. Floating-window audit — residual GTK portal class `[blocked:hw]`
+(Raised by Bernardo, 2026-07-07 — item 11.) Conservative cut + 2026-07-10
+slice shipped: mixer, blueman, system-config-printer, calendar,
+**hyprpolkitagent** + **pinentry-qt** (classes from package app-id
+strings; softGL capture harness could not materialize dialogs).
+**Still open:** GTK file-chooser portal (`xdg-desktop-portal-gtk`) —
+class not discoverable headlessly. On hardware: open a portal file
+picker, `hyprctl clients`, append float/center rules if needed; confirm
+polkit/pinentry/blueman actually float.
 
 ## LATER
 
@@ -475,7 +458,7 @@ _(User password minimum length = 8 → #54.)_
 #### Live ISO discoverability (one durable cue)
 
 _(Live: one always-visible “Install Nomarchy” action → **#57** ✓ 2026-07-10;
-  V2 pending: live ISO desktop entry smoke.)_
+  V2: `checks.live-install-entry` on live HM gen.)_
 
 #### Generated config / post-install polish