fix(docking): make clamshell hotplug safe and discoverable

Real dock QA exposed pointer-bound menus, an absent default rescue watcher, the unsafe zero-output panel-off path, missing keyboard/audio hotplug coverage, and unpainted new outputs.

Route Rofi to the focused output; replace panel disable with safe workspace migration; always run and reconnect the display watcher and repaint hotplugged outputs; expose a default per-device keyboard picker; handle audio card availability transitions.

Verified: V1 — nix flake check --no-build; checks.docking-ux real Home Manager artifact build; option-docs/template-sot; Nix parse, py_compile, and git diff --check. V2 unavailable: no readable KVM. V3 pending in agent/HARDWARE-QUEUE.md.

pkgs/nomarchy-theme-sync/nomarchy-theme-sync.py

@@ -598,7 +598,7 @@ def cmd_get(args) -> None:
 
 
 def cmd_wallpaper(_args) -> None:
-    """Apply the current wallpaper (session start, post-switch hook)."""
+    """Apply the current wallpaper (session start, switch, output hotplug)."""
     apply_wallpaper(load_state(), wait=True)