feat: make VM and live ISO match an installed Nomarchy

- Migrate VM and graphical ISO to home-manager.nixosModules.home-manager;
  drop the standalone-HM sudo-based activation script (ran HM against
  /root because HOME wasn't reset) in flake.nix, core/system/vm-guest.nix,
  hosts/live-iso.nix.
- Run swaybg as nomarchy-wallpaper.service instead of a silent Hyprland
  exec-once so failures surface in systemctl.
- Skip the battery monitor unit on hosts without /sys/class/power_supply/BAT*
  (VMs, desktops).
- Don't wrap walker --dmenu in uwsm-app; redirect setsid background std-fds
  in nomarchy-launch-walker so $(menu ...) in nomarchy-menu doesn't hang.
- Restart waybar/walker via systemctl --user rather than pkill + uwsm-app
  to stop the post-theme-switch color race.
- Wire nomarchy-restart-walker/-waybar into nomarchy-theme-set so themes
  that only change the imported CSS reload correctly.
- Waybar: pin #custom-nomarchy to the Nomarchy font and use the U+F000
  codepoint so the logo shows across all themes.
- Auto-install the correct icon-theme package per palette via a new
  nomarchyLib.iconThemePackage helper in lib/default.nix; Everforest now
  actually renders for summer-night.
- Pre-cache every theme's HM generation: new packages.allThemeVariants
  flake output and nomarchy-themes-prebuild script so theme switches are
  cache-only (no Stylix rebuild, no downloads).
- Add nomarchy-test-live-iso to boot the graphical ISO in QEMU the same
  way nomarchy-test-vm does, with virtio-gpu support added to live-iso.nix.
- Installer-generated home.nix/system.nix now ship a curated, commented
  app menu (btop/fastfetch/chromium on by default) plus optional system
  services (Docker, libvirtd, Tailscale, Syncthing, Flatpak, Steam).
- nomarchy-test-vm now wipes the stale nomarchy.qcow2 before launch.
- Remove obsolete GEMINI.md and PLAN.md.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

features/desktop/scripts/nomarchy-restart-walker

@@ -1,11 +1,18 @@
 #!/bin/bash
 
+# Walker (with runAsService = true) and elephant are Home Manager user
+# services. Restart via systemd so the new process inherits the full graphical
+# session environment — the pkill/uwsm-app dance left a window where the
+# launcher would come back up with stale theming.
+
 restart_services() {
-  if systemctl --user is-enabled elephant.service &>/dev/null; then
+  if systemctl --user list-unit-files elephant.service >/dev/null 2>&1; then
     systemctl --user restart elephant.service
   fi
 
-  if systemctl --user is-enabled app-walker@autostart.service &>/dev/null; then
+  if systemctl --user list-unit-files walker.service >/dev/null 2>&1; then
+    systemctl --user restart walker.service
+  elif systemctl --user is-enabled app-walker@autostart.service &>/dev/null; then
     systemctl --user restart app-walker@autostart.service
   else
     echo -e "\e[31mUnable to restart Walker -- RESTART MANUALLY\e[0m"