feat(host): VAAPI codec probe + AMD/Intel packaging + neutral logs (Phase 3)

Polish for AMD/Intel support:
- GameStream serverinfo advertises only codecs the GPU can ACTUALLY encode on
  the VAAPI backend (probed once by opening a tiny encoder per codec). AV1
  encode is narrow (Intel Arc/Xe2+, AMD RDNA3+/RDNA4) and an old iGPU may lack
  HEVC, so a Moonlight client never negotiates a codec the encoder can't open.
  NVENC/Windows keep the Moonlight-validated static mask. Validated on a Radeon
  780M: h264/h265/av1 all probe true -> mask unchanged (65793).
- Packaging: Recommends mesa-va-drivers + intel-media-va-driver (deb) /
  mesa-va-drivers + intel-media-driver (rpm) so the auto-selected VAAPI backend
  works out of the box on AMD/Intel; NVIDIA boxes can --no-install-recommends.
  (Fedora note: stock mesa-va-drivers disables HEVC/AV1 -- needs the freeworld
  variant from RPM Fusion.)
- De-NVIDIA-fy the user-facing encoder log/context strings ("open NVENC" ->
  "open video encoder") now that VAAPI is a first-class backend.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

crates/punktfunk-host/src/gamestream/serverinfo.rs

@@ -15,6 +15,7 @@ pub fn serverinfo_xml(host: &Host, https: bool) -> String {
     };
     // Over the mutual-TLS HTTPS port the peer is an authenticated (paired) client.
     let pair_status = u8::from(https);
+    let codec_mode_support = codec_mode_support();
     format!(
         r#"<?xml version="1.0" encoding="utf-8"?>
 <root status_code="200">
@@ -27,7 +28,7 @@ pub fn serverinfo_xml(host: &Host, https: bool) -> String {
 <MaxLumaPixelsHEVC>1869449984</MaxLumaPixelsHEVC>
 <mac>{mac}</mac>
 <LocalIP>{local_ip}</LocalIP>
-<ServerCodecModeSupport>{SERVER_CODEC_MODE_SUPPORT}</ServerCodecModeSupport>
+<ServerCodecModeSupport>{codec_mode_support}</ServerCodecModeSupport>
 <PairStatus>{pair_status}</PairStatus>
 <currentgame>0</currentgame>
 <state>SUNSHINE_SERVER_FREE</state>
@@ -41,6 +42,30 @@ pub fn serverinfo_xml(host: &Host, https: bool) -> String {
     )
 }
 
+/// The `<ServerCodecModeSupport>` mask to advertise. On the VAAPI (AMD/Intel) backend it reflects
+/// what the GPU can ACTUALLY encode (probed — AV1 is narrow, and an old iGPU might lack HEVC), so a
+/// Moonlight client never negotiates a codec the encoder can't open. NVENC and Windows keep the
+/// Moonlight-validated static superset.
+fn codec_mode_support() -> u32 {
+    #[cfg(target_os = "linux")]
+    if crate::encode::linux_zero_copy_is_vaapi() {
+        use super::{SCM_AV1_MAIN8, SCM_H264, SCM_HEVC};
+        let caps = crate::encode::vaapi_codec_support();
+        let mut m = 0;
+        if caps.h264 {
+            m |= SCM_H264;
+        }
+        if caps.h265 {
+            m |= SCM_HEVC;
+        }
+        if caps.av1 {
+            m |= SCM_AV1_MAIN8;
+        }
+        return m;
+    }
+    SERVER_CODEC_MODE_SUPPORT
+}
+
 #[cfg(test)]
 mod tests {
     use super::*;

crates/punktfunk-host/src/gamestream/stream.rs

@@ -295,7 +295,7 @@ fn stream_body(
         frame.is_cuda(),
         8, // GameStream/Moonlight path: 8-bit (its own codec negotiation)
     )
-    .context("open NVENC for stream")?;
+    .context("open video encoder for stream")?;
     // FEC overhead percent (Sunshine default 20). Override with PUNKTFUNK_FEC_PCT (0 = data-only).
     let fec_pct: u8 = std::env::var("PUNKTFUNK_FEC_PCT")
         .ok()