feat(packaging): bundle the web console into the RPM / Arch / bootc host packages

The punktfunk-web management console (pairing + status) shipped only via apt. Extend it
to the other HOST packaging methods, mirroring the Debian punktfunk-web .deb (flatpak is
the client, correctly excluded):

- rpm/punktfunk.spec: new noarch `punktfunk-web` subpackage (the .output bundle + a
  /usr/bin/punktfunk-web-server node launcher + both systemd --user units + web-init.sh +
  web.env.example), gated behind `%bcond_with web`. OFF by default because building the
  Nitro/Node SSR bundle needs `bun`, which a plain rpmbuild / COPR mock chroot lacks. Host
  package weak-Recommends punktfunk-web.
- ci/fedora-rpm.Dockerfile: install bun (+ unzip) so the CI builder can build the console.
- rpm.yml: build `PF_WITH_WEB=1` (Prep bootstraps bun to stay green pre-image-rebuild); the
  publish loop already globs the new noarch rpm into the registry. build-rpm.sh: `--with web`
  when PF_WITH_WEB=1.
- bootc/Containerfile: install from the Gitea RPM registry (which carries punktfunk-web)
  instead of COPR — `dnf5 install punktfunk punktfunk-web`.
- arch/PKGBUILD: opt-in `punktfunk-web` split member (PF_WITH_WEB=1 appends it + bun) so a
  default makepkg still builds host+client with no JS tooling — matching the spec's bcond.
- docs: packaging/README, rpm/README, copr/README (the no-bun caveat), bazzite/README
  (Path B rewritten COPR→Gitea registry), arch/README — enable + journal-password steps.

Reviewed across methods by an adversarial multi-agent pass (rpm/ci/arch/bootc/consistency
lenses, each blocking finding 3x-verified); fixed the two it confirmed real — the Arch
bun-mandatory regression (now opt-in) and the stale COPR wording in bazzite Path B.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

packaging/arch/PKGBUILD

@@ -14,6 +14,10 @@
 # NVIDIA hosts; an AMD Deck-as-HOST needs a VAAPI backend first. The CLIENT decodes via VAAPI
 # (AMD/Intel, incl. the Deck) with a software fallback, so it works everywhere. See README.md.
 pkgbase=punktfunk
+# punktfunk-web (the browser console) is OPT-IN: building it needs `bun` (AUR-only as bun-bin on
+# stock Arch/SteamOS), so a default makepkg builds only host+client with no JS tooling — mirroring
+# the RPM spec's `%bcond_with web` (off by default). Set PF_WITH_WEB=1 to also build punktfunk-web
+# (appended to pkgname + bun to makedepends below).
 pkgname=('punktfunk-host' 'punktfunk-client')
 pkgver=0.0.1
 pkgrel=1
@@ -26,6 +30,12 @@ license=('MIT OR Apache-2.0')
 makedepends=('rust' 'cargo' 'clang' 'cmake' 'nasm' 'pkgconf' 'git'
              'gtk4' 'libadwaita' 'sdl3' 'ffmpeg' 'pipewire' 'wayland' 'libxkbcommon' 'opus' 'libei')
 
+# Opt-in punktfunk-web: only then is bun (build tool; the console runs on plain nodejs) required.
+if [ "${PF_WITH_WEB:-0}" = 1 ]; then
+  pkgname+=('punktfunk-web')
+  makedepends+=('bun')   # `bun-bin` from the AUR if bun isn't in your configured repos
+fi
+
 # AUR source (a tagged release). For an in-tree CI build, set PF_SRCDIR to the repo root and
 # build() uses it instead; see the README.
 source=("git+https://git.unom.io/unom/punktfunk.git#tag=v${pkgver}")
@@ -40,6 +50,10 @@ build() {
   # NVIDIA builder. On a GPU-less builder symlink the CUDA stub into the link path first (same
   # caveat the RPM documents): ln -s "$(find / -name libcuda.so -path '*stubs*'|head -1)" /usr/lib/
   cargo build --release --locked -p punktfunk-host -p punktfunk-client-linux
+  # Management web console (opt-in): the node-server .output bundle (built with bun, run with node).
+  if [ "${PF_WITH_WEB:-0}" = 1 ]; then
+    ( cd web && bun install --frozen-lockfile && bun run build )
+  fi
 }
 
 package_punktfunk-host() {
@@ -54,7 +68,8 @@ package_punktfunk-host() {
               'mutter: stream a GNOME desktop (Mutter RecordVirtual backend)'
               'sway: stream a wlroots desktop (Sway VirtualDisplay backend)'
               'xdg-desktop-portal-kde: portal for the headless KDE session helper'
-              'xdg-desktop-portal-wlr: portal for the headless Sway session helper')
+              'xdg-desktop-portal-wlr: portal for the headless Sway session helper'
+              'punktfunk-web: browser management console (device pairing + status)')
   install=punktfunk-host.install
   local R; R="$(_repo)"; local T="$srcdir/target/release"
 
@@ -107,3 +122,28 @@ package_punktfunk-client() {
   install -Dm0644 "$R/LICENSE-MIT"    "$pkgdir/usr/share/licenses/punktfunk-client/LICENSE-MIT"
   install -Dm0644 "$R/LICENSE-APACHE" "$pkgdir/usr/share/licenses/punktfunk-client/LICENSE-APACHE"
 }
+
+package_punktfunk-web() {
+  pkgdesc="punktfunk management web console (Nitro/Node SSR) — pairing + status in the browser"
+  arch=('any')
+  # Runtime is plain node (the .output is portable JS — bun was only the build tool). Auto-wired to
+  # the host's mgmt token via the systemd --user units; enable with `systemctl --user enable --now punktfunk-web`.
+  depends=('nodejs')
+  local R; R="$(_repo)"
+
+  # Pre-built node-server bundle (from build()) + a PATH-stable launcher (matches the .deb/.rpm).
+  install -d "$pkgdir/usr/share/punktfunk-web/.output"
+  cp -r "$R/web/.output/server" "$pkgdir/usr/share/punktfunk-web/.output/server"
+  cp -r "$R/web/.output/public" "$pkgdir/usr/share/punktfunk-web/.output/public"
+  install -d "$pkgdir/usr/bin"
+  printf '%s\n' '#!/bin/sh' 'exec /usr/bin/node /usr/share/punktfunk-web/.output/server/index.mjs "$@"' \
+    > "$pkgdir/usr/bin/punktfunk-web-server"
+  chmod 0755 "$pkgdir/usr/bin/punktfunk-web-server"
+  # systemd USER units: the console runs per-user; web-init generates the login password on first start.
+  install -Dm0644 "$R/scripts/punktfunk-web.service"      "$pkgdir/usr/lib/systemd/user/punktfunk-web.service"
+  install -Dm0644 "$R/scripts/punktfunk-web-init.service" "$pkgdir/usr/lib/systemd/user/punktfunk-web-init.service"
+  install -Dm0755 "$R/scripts/web-init.sh"                "$pkgdir/usr/share/punktfunk-web/web-init.sh"
+  install -Dm0644 "$R/web/web.env.example"                "$pkgdir/usr/share/punktfunk-web/web.env.example"
+  install -Dm0644 "$R/LICENSE-MIT"    "$pkgdir/usr/share/licenses/punktfunk-web/LICENSE-MIT"
+  install -Dm0644 "$R/LICENSE-APACHE" "$pkgdir/usr/share/licenses/punktfunk-web/LICENSE-APACHE"
+}