fix: real-hardware QA sweep — wifi, fonts, firmware, Hyprland 0.55, offline switching

Roadmap items 1+2 plus the issues found testing on a Latitude 5410:

- Ship the 10 most popular Nerd Fonts by default (iosevka swapped for
  mononoki: 1.1 GB vs 27 MB) and warn from nomarchy-theme-sync when a
  configured fonts.mono/fonts.ui family isn't installed (fc-match) —
  fontconfig substitutes silently otherwise.
- hardware.enableRedistributableFirmware: installed systems shipped NO
  firmware blobs (wifi/SOF audio/BT) — nixos-generate-config only emits
  microcode lines referencing this flag, it never sets it.
- Live ISO wifi: networking.wireless.enable = mkForce false killed
  NetworkManager's supplicant — since 26.05 the NM module drives its
  wifi backend THROUGH networking.wireless (dbusControlled). Devices
  vanished from nmtui with iwlwifi loaded and no rfkill block.
- Hyprland 0.55: launch sessions via start-hyprland (watchdog; bare
  binary warns), add the new gesture keyword (workspace_swipe is gone —
  touchpads had no gestures at all), media keys via wpctl/bindel/bindl
  plus the missing mic/play/next/prev binds.
- Offline theme switching: pin mustache-go + stdenv + the repo's own
  standalone HM generation (incl. home-files inputDerivation) into the
  ISO — stylix re-renders base16 templates per switch and an offline
  `apply` cascaded into building stdenv from source (1107 drvs).
  Verified with tools/vm/gap-analysis.py: 17 config drvs, zero fetches.
- Stylix: track release-26.05 (kills the HM version-skew warning and
  the stale home-manager follows), lock updated.
- Roadmap: swaync (no notification daemon ships today).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

modules/nixos/default.nix

@@ -28,12 +28,14 @@ in
       enable = lib.mkDefault true;
       settings = {
         default_session = {
-          command = lib.mkDefault "${pkgs.tuigreet}/bin/tuigreet --time --remember --cmd Hyprland";
+          # start-hyprland is Hyprland 0.55's watchdog launcher; running
+          # the bare binary makes every session print a warning.
+          command = lib.mkDefault "${pkgs.tuigreet}/bin/tuigreet --time --remember --cmd start-hyprland";
           user = "greeter";
         };
         # Boot straight into the session once; logout → normal greeter.
         initial_session = lib.mkIf (cfg.greeter.autoLogin != null) {
-          command = "Hyprland";
+          command = "start-hyprland";
           user = cfg.greeter.autoLogin;
         };
       };
@@ -60,6 +62,13 @@ in
     hardware.bluetooth.enable = lib.mkDefault cfg.bluetooth.enable;
     services.blueman.enable = lib.mkDefault cfg.bluetooth.enable;
 
+    # ── Firmware ─────────────────────────────────────────────────────
+    # Blobs for in-kernel drivers: wifi (iwlwifi/ath/rtw/brcm), SOF
+    # audio, Bluetooth. Drivers ship with the kernel, but without these
+    # a real machine can boot with no wifi — QEMU never catches it.
+    # nixos-generate-config also keys CPU microcode off this flag.
+    hardware.enableRedistributableFirmware = lib.mkDefault true;
+
     # ── BTRFS timeline snapshots (ported from the previous iteration) ─
     # Guarded on the actual filesystem so enabling it on an ext4 machine
     # is a clean no-op rather than a failing timer.
@@ -79,9 +88,23 @@ in
       };
 
     # ── Fonts ────────────────────────────────────────────────────────
+    # The ten most popular Nerd Fonts ship by default, so any of them
+    # can be named in the theme state's fonts.mono and actually resolve
+    # (nomarchy-theme-sync warns when a configured font is missing).
     fonts = {
       packages = with pkgs; [
         nerd-fonts.jetbrains-mono
+        nerd-fonts.fira-code
+        nerd-fonts.caskaydia-cove
+        nerd-fonts.hack
+        nerd-fonts.sauce-code-pro
+        nerd-fonts.meslo-lg
+        nerd-fonts.roboto-mono
+        nerd-fonts.ubuntu-mono
+        # iosevka would be next by popularity, but its package is 1.1 GB
+        # (every weight × variant) — too heavy for the ISO and closures.
+        nerd-fonts.mononoki
+        nerd-fonts.inconsolata
         inter
         noto-fonts
         noto-fonts-color-emoji