rename: lumen → punktfunk, everywhere

Full project rename, decided 2026-06-10:
- Crates/binaries: punktfunk-core / punktfunk-host / punktfunk-client-rs.
- C ABI: punktfunk_* symbols, Punktfunk* types, include/punktfunk_core.h,
  PUNKTFUNK_FEATURE_QUIC guard (header regenerated; cbindgen renames updated, incl.
  PUNKTFUNK_BTN_*/PUNKTFUNK_AXIS_* wire constants).
- Protocol: punktfunk/1 — control-plane magic LMN1 → PKF1, nonce salt lmn1 → pkf1.
  WIRE BREAK: clients must be rebuilt from this revision.
- Env knobs: PUNKTFUNK_VIDEO_SOURCE / PUNKTFUNK_COMPOSITOR / PUNKTFUNK_ZEROCOPY / ….
- Host config dir: ~/.config/punktfunk (the box's dir was migrated in place — the
  persistent identity is unchanged, pinned fingerprints stay valid).
- Swift package: PunktfunkKit + PunktfunkCore.xcframework + PunktfunkConnection
  (Sources/PunktfunkClient app + tests renamed with it); build-xcframework.sh updated.
- scripts/: 60-punktfunk.rules, punktfunk-host.service; OpenAPI doc regenerated.

Also: scripts/headless/run-headless-kde.sh — full headless Plasma bringup. Root cause of
"desktop but no apps/settings" over the stream: plasmashell launched without
XDG_MENU_PREFIX=plasma-, so the launcher resolved a nonexistent applications.menu and
rendered an empty menu. The script sets the complete KDE session env (menu prefix,
KDE_FULL_SESSION, session version) and rebuilds ksycoca before starting plasmashell.

Gate: 97/97 tests, clippy -D warnings (both feature sets), fmt, C-ABI harness PASS,
zero lumen references left outside .git.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

crates/punktfunk-host/Cargo.toml

@@ -0,0 +1,92 @@
+[package]
+name = "punktfunk-host"
+description = "punktfunk Linux streaming host: virtual display, capture, encode, input injection"
+version.workspace = true
+edition.workspace = true
+rust-version.workspace = true
+license.workspace = true
+authors.workspace = true
+repository.workspace = true
+
+[dependencies]
+punktfunk-core = { path = "../punktfunk-core", features = ["quic"] }
+# M3 native control plane (the `punktfunk/1` QUIC handshake; data plane stays native-thread UDP).
+quinn = "0.11"
+anyhow = "1"
+tracing = "0.1"
+tracing-subscriber = { version = "0.3", features = ["env-filter"] }
+axum = "0.8"
+mdns-sd = "0.20"
+tokio = { version = "1", features = ["full"] }
+rsa = "0.9"
+sha2 = { version = "0.10", features = ["oid"] }
+aes = "0.8"
+aes-gcm = "0.10"
+cbc = { version = "0.1", features = ["alloc"] }
+rand = "0.8"
+hex = "0.4"
+rcgen = { version = "0.13", default-features = false, features = ["aws_lc_rs", "pem"] }
+x509-parser = "0.16"
+axum-server = { version = "0.7", features = ["tls-rustls"] }
+rustls = "0.23"
+rustls-pemfile = "2"
+rusty_enet = "0.4"
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"
+# Management/control-plane REST API + OpenAPI (control pane, M2). `axum_extras` wires
+# utoipa into axum 0.8 extractors; utoipa-axum collects `#[utoipa::path]` routes into the
+# spec; utoipa-scalar serves the interactive docs. Codegen-friendly: the spec is emitted
+# verbatim by the `openapi` subcommand. Control plane only — never the per-frame path.
+utoipa = { version = "5", features = ["axum_extras"] }
+utoipa-axum = "0.2"
+utoipa-scalar = { version = "0.3", features = ["axum"] }
+
+[dev-dependencies]
+# Drive the management API router in-process (no socket) in the handler tests.
+tower = { version = "0.5", features = ["util"] }
+http-body-util = "0.1"
+
+[target.'cfg(target_os = "linux")'.dependencies]
+# `screencast` gates the ScreenCast portal module; `remote_desktop` adds the RemoteDesktop
+# portal we use for libei input on KWin/GNOME; `tokio` is the default runtime.
+# `open_pipe_wire_remote` is unconditional, so ashpd's own `pipewire` feature is not
+# needed — we drive PipeWire with the `pipewire` crate below.
+ashpd = { version = "0.13", features = ["screencast", "remote_desktop"] }
+ffmpeg-next = "8"
+libc = "0.2"
+# Must match the pipewire crate ashpd 0.13 links (libspa/pipewire-sys `links` key is
+# unique per build), i.e. 0.9 — NOT the 0.10 the setup doc mentions.
+pipewire = "0.9"
+# ashpd 0.13 uses the tokio runtime; a current-thread runtime drives the one-time
+# portal handshake (control plane — never the per-frame path).
+tokio = { version = "1", features = ["rt", "rt-multi-thread", "net", "time"] }
+# Input injection into headless Sway via the wlroots virtual-input Wayland protocols
+# (uinput won't reach a compositor running with WLR_LIBINPUT_NO_DEVICES=1).
+wayland-client = "0.31"
+wayland-protocols-wlr = { version = "0.3", features = ["client"] }
+wayland-protocols-misc = { version = "0.3", features = ["client"] }
+# Codegen for KDE's `zkde_screencast_unstable_v1` (vendored in `protocols/`): create a KWin
+# virtual output sized to the client's resolution and get its PipeWire node (KRdp's path).
+# `wayland-backend` is referenced by the generated interface tables.
+wayland-scanner = "0.31"
+wayland-backend = "0.3"
+# Parse `pw-dump` JSON to find gamescope's PipeWire node (gamescope backend).
+serde_json = "1"
+# Builds/validates the xkb keymap uploaded to the virtual keyboard + tracks modifier state.
+xkbcommon = "0.8"
+# Opus encode for the GameStream audio stream (links system libopus).
+opus = "0.3"
+# libei (EI sender) for the portable input path on KWin/GNOME (RemoteDesktop portal).
+# The `tokio` feature wires reis's event stream into tokio's reactor.
+reis = { version = "0.6.1", features = ["tokio"] }
+# `StreamExt::next` on reis's tokio event stream in the libei worker loop.
+futures-util = "0.3"
+# Zero-copy capture (plan §9): EGL imports the PipeWire dmabuf, CUDA maps it, NVENC encodes
+# it with no CPU roundtrip. `khronos-egl` (dynamic = load the NVIDIA libEGL at runtime) gives
+# eglCreateImage + the dma_buf import; the CUDA driver API (EGL interop) and libgbm are linked
+# via hand-rolled FFI in `src/zerocopy/` (no Rust crate exposes the EGL-interop driver calls).
+khronos-egl = { version = "6", features = ["dynamic"] }
+# Vulkan bridge for LINEAR dmabufs (gamescope): import via VK_EXT_external_memory_dma_buf,
+# GPU-copy into an exportable allocation, export OPAQUE_FD → cuImportExternalMemory (the
+# officially-supported CUDA pairing; raw dmabuf fds are rejected by the desktop driver).
+ash = "0.38"