feat(hdr): GNOME 50 HDR screencast capture + Linux Main10 encode

GNOME 50 (Mutter MR 4928, PipeWire >= 1.6) added HDR screen sharing for
monitor streams: 10-bit PQ formats (xRGB_210LE/xBGR_210LE) with MANDATORY
BT.2020 + SMPTE-2084 colorimetry props, advertised while the mirrored
monitor is in BT.2100 colour mode. Wire the Linux host into it end-to-end
on the GameStream desktop-mirror path (PUNKTFUNK_VIDEO_SOURCE=portal):

* pf-frame: PixelFormat::X2Rgb10/X2Bgr10 (DRM XR30/XB30; X2Bgr10 is the
  Windows Rgb10a2 layout) + fourccs.
* pf-capture: want_hdr portal offer — HDR-only LINEAR-dmabuf pods with
  MANDATORY PQ/BT.2020 props (SHM excluded: Mutter's SHM record path
  paints 8-bit ARGB32 regardless of format; tiled excluded: the EGL
  de-tile blit is 8-bit RGBA8), negotiated-colorimetry parse, generic
  HDR10 hdr_meta(), packed-10-bit CPU cursor blend, a process-wide SDR
  downgrade latch on negotiation timeout, and a DisplayConfig BT.2100
  colour-mode probe (gnome_hdr_monitor_active).
* pf-encode: libav NVENC X2RGB10->P010 swscale (BT.2020 limited) ->
  HEVC Main10 / 10-bit AV1 with PQ VUI; VAAPI 10-bit on both paths (CPU
  P010 upload + dmabuf XR30 scale_vaapi p010/bt2020); can_encode_10bit
  now probes for real on Linux; 10-bit sessions route around the
  8-bit-only Vulkan-video/direct-NVENC backends.
* GameStream: host_hdr_capable() Linux arm, live monitor-HDR check at
  RTSP honor time, capturer-pool reuse keyed on HDR-ness, gs_bit_depth
  covers the new formats. New `punktfunk-host hdr-probe` diagnostic and
  a PUNKTFUNK_SPIKE_HDR spike lever.
* Native plane stays honestly 8-bit via capturer_supports_hdr(): Mutter
  RecordVirtual streams are SDR-only upstream (GNOME 50 and 51-dev), so
  virtual-display sources cannot deliver HDR yet.

Validated on the RTX 5070 Ti (GNOME 50.3 / PipeWire 1.6.8): the Main10
probes pass and the ignored nvenc_hdr10_smoke GPU test emits an IDR that
ffprobe reads as Main 10 / yuv420p10le / bt2020nc / smpte2084 / limited.
Live HDR capture negotiation still needs an HDR monitor on glass; VAAPI
10-bit needs the AMD box.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

docs-site/content/docs/configuration.md

@@ -88,7 +88,7 @@ See your desktop page ([KDE](/docs/kde), [GNOME](/docs/gnome)) for when to set t
 | Setting | Values | Meaning |
 |---|---|---|
 | `PUNKTFUNK_FEC_PCT` | `N` (percent) | Forward-error-correction redundancy for lossy links (the default is sensible for a normal LAN). Higher = more loss-resilient, more bandwidth. |
-| `PUNKTFUNK_10BIT` | `1` · `0` *(default on)* | HEVC Main10 / HDR. **On by default** — the host permits 10-bit; a session goes 10-bit only when the client advertises it (behind the client's HDR setting). Set `0` to force 8-bit. **Windows host only** (the Linux host stays 8-bit). |
+| `PUNKTFUNK_10BIT` | `1` · `0` *(default on)* | HEVC Main10 / HDR. **On by default** — the host permits 10-bit; a session goes 10-bit only when the client advertises it (behind the client's HDR setting). Set `0` to force 8-bit. Windows host, plus the Linux **GNOME 50+ GameStream desktop mirror** (`PUNKTFUNK_VIDEO_SOURCE=portal`, mirrored monitor in HDR mode — check with `punktfunk-host hdr-probe`). Linux **virtual displays** (native protocol, GameStream default) stay 8-bit: Mutter's virtual-monitor screencast is SDR-only upstream. |
 | `PUNKTFUNK_444` | `1` · `0` *(default on)* | Full-chroma HEVC 4:4:4 (Range Extensions) — sharper text/desktop, no chroma loss. **On by default** on the host; the client's own 4:4:4 setting (default off) is the real switch. Set `0` to force 4:2:0. **punktfunk/1 native only** (Moonlight stays 4:2:0), HEVC-only, honored only when the client advertises 4:4:4 **and** the GPU supports it (probed; NVENC is the validated path — VAAPI/AMF/QSV decline). Independent of 10-bit. |
 | `PUNKTFUNK_PYROWAVE_MAX_MBPS` | `N` (Mbps) | Cap the [PyroWave](/docs/pyrowave) Automatic bitrate pin, for a host on a link that the open-loop pin can outrun (e.g. 4:4:4 + HDR at 5120×1440@240 pins ~5.3 Gbps, over a 5GbE link). Unset = no cap. Only affects Automatic (bitrate `0`) PyroWave sessions; an explicit client bitrate bypasses it. |
 | `PUNKTFUNK_DSCP` | `1` | Opt-in DSCP / `SO_PRIORITY` QoS tagging on the media sockets. No-op on the wire on Windows without a qWAVE policy. |

docs-site/content/docs/roadmap.md

@@ -24,7 +24,7 @@ see [Status & Progress](/docs/status).
 | Web console + pairing | ✅ |
 | Concurrent sessions (shared desktop) | ✅ |
 | Network speed test + bitrate | ✅ |
-| HDR / 10-bit streaming | ✅ Windows host · ⛔ Linux host |
+| HDR / 10-bit streaming | ✅ Windows host · 🚧 Linux host (GNOME 50+ desktop mirror; virtual displays blocked upstream) |
 | Surround audio (5.1 / 7.1) | ✅ |
 | Sub-frame pipelining (latency) | 🔭 |
 
@@ -100,10 +100,14 @@ see [Status & Progress](/docs/status).
 
 ## ⛔ Parked / blocked
 
-- **HDR / 10-bit on the *Linux* host.** HDR streaming already works from a
-  [Windows host](/docs/windows-host) to an HDR-capable client (Windows, Android). On Linux it's
-  blocked upstream — no shipping compositor emits a 10-bit/HDR capture stream yet — and ready the
-  moment one does.
+- **HDR / 10-bit on the *Linux* host — virtual displays.** GNOME 50 added HDR screencasting for
+  **monitor** streams, and the host now uses it: the GameStream desktop mirror
+  (`PUNKTFUNK_VIDEO_SOURCE=portal`) negotiates the 10-bit PQ formats and encodes HEVC Main10
+  BT.2020 PQ (`punktfunk-host hdr-probe` reports readiness; on-glass validation pending). What
+  stays blocked upstream is HDR on **virtual monitors** — Mutter's `RecordVirtual` streams are
+  still SDR-only (through the GNOME 51 dev branch), so the native protocol and GameStream's
+  default virtual-display source stream 8-bit until that lands; the host is ready the moment it
+  does.
 - **Advanced DualSense voice-coil haptics.** Scoped and shelved (it rides the controller's USB audio
   interface, with near-zero game support on Linux). Adaptive triggers, rumble, and the lightbar
   already ship.

docs-site/content/docs/status.md

@@ -35,9 +35,13 @@ host is newer than the Linux host.)
 - **Zero-copy GPU pipeline.** Captured frames stay on the GPU — dmabuf → CUDA → NVENC on NVIDIA, and
   VAAPI or Vulkan Video on AMD/Intel — with automatic split-encode at very high resolutions. Stable
   240 fps at 5120×1440 has been measured. A GPU-less software H.264 encoder exists as an explicit fallback.
-- **HDR (10-bit), on the Windows host.** An HDR Windows desktop is captured and encoded as HEVC
-  Main10 (BT.2020 PQ) to HDR-capable clients (Windows, Android). Linux hosts stream 8-bit for now —
-  HDR there is blocked upstream at the compositor.
+- **HDR (10-bit).** An HDR Windows desktop is captured and encoded as HEVC Main10 (BT.2020 PQ) to
+  HDR-capable clients (Windows, Android). On Linux, a **GNOME 50+** host can mirror an HDR monitor
+  over the GameStream desktop-capture source (`PUNKTFUNK_VIDEO_SOURCE=portal`): the portal
+  negotiates the 10-bit PQ screencast formats GNOME 50 added and encodes Main10 PQ (run
+  `punktfunk-host hdr-probe` to check readiness; pending on-glass validation). Linux **virtual
+  displays** — the native protocol and GameStream's default source — still stream 8-bit: Mutter's
+  virtual-monitor screencast is SDR-only upstream.
 - **Secure by default.** A **SPAKE2 PIN pairing** ceremony establishes trust (the host
   shows a 4-digit PIN; an attacker gets a single online guess, no offline dictionary
   attack). Trust-on-first-use (TOFU) remains an explicit opt-in for fully trusted LANs.