fix(docking): make clamshell hotplug safe and discoverable

Real dock QA exposed pointer-bound menus, an absent default rescue watcher, the unsafe zero-output panel-off path, missing keyboard/audio hotplug coverage, and unpainted new outputs.

Route Rofi to the focused output; replace panel disable with safe workspace migration; always run and reconnect the display watcher and repaint hotplugged outputs; expose a default per-device keyboard picker; handle audio card availability transitions.

Verified: V1 — nix flake check --no-build; checks.docking-ux real Home Manager artifact build; option-docs/template-sot; Nix parse, py_compile, and git diff --check. V2 unavailable: no readable KVM. V3 pending in agent/HARDWARE-QUEUE.md.

agent/JOURNAL.md

@@ -19,6 +19,24 @@ Template:
 
 ---
 
+## 2026-07-13 — Docking hardware-QA corrections (interactive feedback)
+- **Task:** Bernardo's real clamshell QA: menu on hidden eDP, no keyboard
+  layout route, audio stayed on speakers, laptop-off lost apps, abrupt
+  undock never restored eDP.
+- **Did:** Rofi → focused output; replaced eDP disable with safe Dock mode
+  (move workspaces/focus, keep fallback); display watcher now unconditional,
+  reconnecting and race-tolerant. Keyboard watcher runs by default with all
+  XKB layouts + System › Keyboard. Audio also reacts to card/port changes;
+  monitor-added re-applies the current awww wallpaper to the new output.
+  Corrected the fallback harness assumption; added `checks.docking-ux` and
+  synced README/template/ROADMAP/hardware queue.
+- **Verified:** V1 — `nix flake check --no-build`; `checks.docking-ux`
+  built the real HM generation and passed syntax/invariant/layout-catalog
+  assertions; option docs 90/90, template SoT 4/4; Nix parse + Python
+  compile + diff check. V2 unavailable (no readable KVM).
+- **Pending:** hardware retest in HARDWARE-QUEUE (docking correction round 3).
+- **Next suggestion:** hardware retest this exact dock sequence.
+
 ## 2026-07-12 — #89 slice 3: Documented Signal tray icon limitation (no commit)
 - **Task:** BACKLOG #89 slice 3 — Signal's tray icon is full-colour blue and doesn't match the monochrome bar.
 - **Did:** Researched Signal's Linux tray icon behavior. Found it is a hardcoded, dynamically generated pixmap (`Signal_status_icon_1`) driven by its Electron wrapper with no built-in toggle for a monochrome icon. Added an entry to `docs/ROADMAP.md`'s known issues noting that certain Electron apps cannot be natively themed. Closed out #89 from the backlog without introducing brittle `app.asar` repacking hacks.
@@ -608,4 +626,3 @@ Template:
 - **Pending:** slices 2 (systemd sunrise/sunset timers + login apply, V2)
   and 3 (Look & Feel menu) remain under #79.
 - **Next suggestion:** #79 slice 2 — the timer/hook (V2 runNixOSTest).
-