feat(menu): Recovery scopes (#111), System IA (#105), drop Control Center (#110)

System is Connectivity / Devices / Recovery / Preferences under the same
six-entry root. Recovery lists desktop (HM), system boot, and BTRFS files
once each with cost labels. Control Center is gone: blur/gaps live in Look
& Feel; update checks and Bluetooth/Printing package toggles in Preferences
(with rebuilds). docs/RECOVERY paths updated.

docs/HARDWARE.md

@@ -136,10 +136,9 @@ confirm → `fwupdmgr update`. It never auto-flashes — `fwupdmgr update`
 confirms each device and prompts for the reboot a capsule needs; pillar 1
 (rock-stable) forbids silent BIOS writes.
 
-**Hints (#43 / #73):** MOTD cheat-sheet line + `nomarchy-control-center
---first-boot` tip when `fwupdmgr` is on PATH. Fingerprint / doctor tips
-follow the same pattern (fingerprint MOTD only when
-`nomarchy.hardware.fingerprint.enable`).
+**Hints (#43 / #73):** MOTD cheat-sheet line when `fwupdmgr` is on PATH.
+Fingerprint / doctor tips follow the same pattern (fingerprint MOTD only
+when `nomarchy.hardware.fingerprint.enable`).
 
 **Still queued:** a Doctor “updates available” check, and
 Waybar/updates-panel integration.

docs/RECOVERY.md

@@ -21,8 +21,10 @@ home-manager generations          # newest first, one per theme/HM change
 /nix/store/…-home-manager-generation/activate   # run the one you want
 ```
 
-The same picker lives in the menu: **System › Rollback** lists the
-recent desktop generations — pick one and it activates.
+The same picker lives in the menu: **System › Recovery › Desktop
+generation** lists the recent Home Manager generations — pick one and
+it activates. System-level undo is **System › Recovery › System boot
+generation** (boot menu) or **Files (BTRFS)** (snapper).
 
 Or simply apply a theme you know is good: `nomarchy-state-sync apply
 boreal` (or any preset). If a switch failed halfway, the state file is written
@@ -69,8 +71,8 @@ With `nomarchy.system.snapper.enable` (the installer's default on
 BTRFS), the root filesystem has hourly/daily history, and
 `nixos-rebuild-snap` leaves a snapshot right before a rebuild:
 
-- **GUI:** menu › System › Snapshots (btrfs-assistant; expects a polkit
-  password prompt).
+- **GUI:** menu › System › Recovery › Files (BTRFS) (btrfs-assistant;
+  expects a polkit password prompt).
 - **Terminal/SSH:** `sudo nomarchy-snapshots` — browse a snapshot's
   diff, **restore changed files** (snapper `undochange`), or **roll the
   whole root back** to a snapshot and reboot. Both destructive actions

docs/ROADMAP.md

@@ -427,6 +427,13 @@ Design/decision records and a running log of shipped work (items marked
   default `$TERMINAL` / SUPER+Return, doctor + calendar + what-changed use
   `kitty --class=com.nomarchy.*`. Ghostty module and install-time GL probe
   removed. V3: Acer SUPER+Return + doctor float.
+- ✓ **Recovery + System IA + Control Center retired (#111 / #105 / #110):**
+  System menu is Connectivity / Devices / Recovery / Preferences (root still
+  six entries). Recovery is scope-first: Desktop generation (HM), System boot
+  generation (how), Files BTRFS, What changed. Control Center package removed;
+  blur/gaps (presets) in Look & Feel; update checks + Bluetooth/Printing
+  package toggles in Preferences (system toggles run `nomarchy-rebuild`).
+  #117 absorbed (rebuild no longer left to the user for those rows).
 - ✓ **Airplane mode (#104):** System › Airplane mode + SUPER+CTRL+R +
   Waybar plane glyph (self-hides when off). Runtime `nomarchy-airplane`
   softs Wi-Fi (nmcli) + Bluetooth (rfkill/bluetoothctl), remembers prior

docs/VISION.md

@@ -74,7 +74,7 @@ Reference: [HARDWARE.md](HARDWARE.md) §4–§5, §11 (doctor).
 | **Silent first-week card** ✓ | One dismissible “you’re set” (menu, themes, keys, network) — not a wizard | ✓ shipped #81 — `settings.firstBootShown` + notify; live ISO keeps its own toast |
 | **Boreal as default** ✓ | Identity on first boot | ✓ seed `state.json` + install path use Boreal (2026-07-09) |
 | **Generation readability** ✓ | “What changed last rebuild” in plain language | ✓ shipped #82 — nvd toast + System › What changed? |
-| **Post-install hints** | One-shot MOTD/notify for fwupd / fprintd when relevant | Partial: MOTD + control-center tips; still no self-gated *first-session* toast when hardware is present (see BACKLOG PROPOSED) |
+| **Post-install hints** | One-shot MOTD/notify for fwupd / fprintd when relevant | Partial: MOTD tips; first-session toast is #81; still refine self-gated hardware hints if needed |
 
 ---