Clean up Arch profile: remove i3/Void-specific config and fix GNOME integration

- Remove XFCE/i3-specific packages and dotfiles from Arch path (xarchiver,
  udiskie, Thunar, xfce-polkit, clipman, screenshooter)
- Separate per-OS dotfiles: mimeapps, udiskie config, GTK theme script,
  udiskie-password, dbus-session and ssh-agent fragments moved to Void-only
- Add mimeapps.arch.list with Nautilus/GNOME associations for nymph
- Move dunst/rofi directory creation from common to profile_desktop_i3
- Add gnome-keyring PAM hooks for GDM (gdm-password) in profile_desktop_gnome
- Remove ssh-agent.service from desktop_systemd_user_services on Arch;
  drop ssh-agent dependency and hardcoded socket from emacs.service
- Add ttf-hack-nerd to Arch font packages
- Fix rustup bootstrap: use rustup-init on Void, rustup toolchain install on Arch

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

ansible/roles/profile_desktop_common/tasks/main.yml

@@ -19,10 +19,7 @@
   loop:
     - "{{ user_home }}/.config"
     - "{{ user_home }}/.config/autostart"
-    - "{{ user_home }}/.config/dunst"
     - "{{ user_home }}/.config/alacritty"
-    - "{{ user_home }}/.config/Thunar"
-    - "{{ user_home }}/.config/rofi"
     - "{{ user_home }}/.config/systemd"
     - "{{ user_home }}/.config/systemd/user"
     - "{{ user_home }}/.bashrc.d"
@@ -504,14 +501,27 @@
         path: "{{ user_home }}/.cargo/bin/rustc"
       register: rustup_initialized
 
-    - name: Run rustup-init with cargo env sourced
+    - name: Run rustup-init with cargo env sourced (Void)
       ansible.builtin.shell:
         cmd: . ~/.cargo/env && rustup-init -y --no-modify-path
         creates: "{{ user_home }}/.cargo/bin/rustc"
       become_user: "{{ username }}"
       environment:
         HOME: "{{ user_home }}"
-      when: not rustup_initialized.stat.exists
+      when:
+        - not rustup_initialized.stat.exists
+        - "'void' in group_names"
+
+    - name: Install Rust stable toolchain via rustup (Arch)
+      ansible.builtin.command:
+        cmd: rustup toolchain install stable
+        creates: "{{ user_home }}/.cargo/bin/rustc"
+      become_user: "{{ username }}"
+      environment:
+        HOME: "{{ user_home }}"
+      when:
+        - not rustup_initialized.stat.exists
+        - "'arch' in group_names"
 
     - name: Ensure cargo env is sourced in shell profile
       ansible.builtin.lineinfile:

ansible/roles/profile_desktop_gnome/tasks/main.yml

@@ -16,3 +16,27 @@
     force: true
     owner: root
     group: root
+
+- name: Enable gnome-keyring PAM auth hook for GDM
+  tags: [gnome]
+  ansible.builtin.lineinfile:
+    path: /etc/pam.d/gdm-password
+    insertafter: '^auth\s+include\s+system-local-login$'
+    line: "auth       optional  pam_gnome_keyring.so"
+    state: present
+
+- name: Enable gnome-keyring PAM session hook for GDM
+  tags: [gnome]
+  ansible.builtin.lineinfile:
+    path: /etc/pam.d/gdm-password
+    insertafter: '^session\s+include\s+system-local-login$'
+    line: "session    optional  pam_gnome_keyring.so auto_start"
+    state: present
+
+- name: Enable gnome-keyring PAM password hook for GDM
+  tags: [gnome]
+  ansible.builtin.lineinfile:
+    path: /etc/pam.d/gdm-password
+    insertafter: '^password\s+include\s+system-local-login$'
+    line: "password   optional  pam_gnome_keyring.so use_authtok"
+    state: present

ansible/roles/profile_desktop_i3/tasks/main.yml

@@ -8,8 +8,10 @@
     group: "{{ user_group }}"
     mode: "0755"
   loop:
+    - "{{ user_home }}/.config/dunst"
     - "{{ user_home }}/.config/i3"
     - "{{ user_home }}/.config/i3blocks"
+    - "{{ user_home }}/.config/rofi"
   when: "'i3' in (desktop_sessions_enabled | default([]))"
 
 - name: Install allowed emptty X11 sessions