fix(qa): comprehensive out-of-the-box audit and repair

- Fix critical bash dynamic scoping bug in install.sh (Impermanence/Form Factor).
- Polished Live ISO with auto-login and passwordless sudo.
- Repurposed nomarchy-toggle-suspend to directly execute systemctl suspend.
- Updated nomarchy-launch-wifi to use nmtui in alacritty.
- Optimized nomarchy-welcome to avoid redundant rebuilds via --no-update flag.
- Enabled nomarchy-welcome in Hyprland autostart.
- Wrapped Live ISO-modifying steps in welcome wizard to prevent failures.
- Removed obsolete hardware auto-detection from nomarchy-on-boot.
- Hardened script doc generator against false-positive wildcard tokens.
- Regenerated docs/SCRIPTS.md and updated docs/ROADMAP.md.

themes/engine/scripts/nomarchy-font-set

@@ -3,11 +3,17 @@ set -e
 
 # Set the system-wide monospace font that should be used by the terminal, hyprlock, waybar, swayosd, etc.
 # Declarative version for Nomarchy NixOS.
+# Usage: nomarchy-font-set <font-name> [--no-update]
 
 font_name="$1"
+no_update=false
+
+if [[ "${2:-}" == "--no-update" ]]; then
+  no_update=true
+fi
 
 if [[ -z $font_name ]]; then
-  echo "Usage: nomarchy-font-set <font-name>"
+  echo "Usage: nomarchy-font-set <font-name> [--no-update]"
   exit 1
 fi
 
@@ -21,6 +27,12 @@ if fc-list | grep -iq "$font_name"; then
   TMP_JSON=$(mktemp)
   jq --arg font "$font_name" '.font = $font' "$STATE_FILE" > "$TMP_JSON" && mv "$TMP_JSON" "$STATE_FILE"
   echo "Font set to $font_name declaratively. Applying changes..."
+
+  if [[ "$no_update" == "true" ]]; then
+    echo "Skipping nomarchy-env-update due to --no-update flag."
+    exit 0
+  fi
+
   nomarchy-env-update
 
   # Instant feedback for certain apps via IPC