docs: repo-wide housekeeping — sync README & docs with the code as shipped

Six parallel audits swept the root docs, docs-site, every per-directory
README, and the packaging docs; every claim below was verified against
the source before editing.

- README: Layout gains the six missing crates (pf-client-core,
  pf-presenter, pf-console-ui, pf-ffvk, pf-driver-proto, punktfunk-tray),
  clients/session, api/ and ci/; Linux/Windows client rows reflect the
  shell + Vulkan-session split and the Vulkan Video -> VAAPI/D3D11VA ->
  software decode chains; the "every client over a C ABI" claim is
  corrected (Rust clients link the core directly); tiered stats overlay
  + console shell noted; Apple row mentions AV1.
- CONTRIBUTING: drop the dead CLAUDE.md link (deliberately untracked);
  point at the README's build/invariants sections. SECURITY: 0.9.0.
- host-cli/pairing: --allow-pairing/--require-pairing are no-op legacy
  names — pairing is required by default, --allow-tofu is the real flag;
  document --data-port and --idle-timeout-ms.
- configuration: document PUNKTFUNK_RECOVER_SESSION_CMD (session-crash
  recovery hook), PUNKTFUNK_MDNS, PUNKTFUNK_DATA_PORT.
- virtual-displays/gnome: GNOME per-client scaling shipped (host-
  persisted) — flip the ❌ to ✅ and describe how it works.
- stats: new "Detail levels" section (Off/Compact/Normal/Detailed +
  per-platform cycle gestures); retire the GTK hand-off note.
- clients/install-client/status/roadmap: decode chains, Windows client
  validation narrowed to HDR-only pending, adaptive bitrate, console
  shell, Apple AV1, Windows host vendor list.
- Sub-READMEs: clients/linux rewritten for the re-architecture; session
  Windows decode rung + d3d11va knob; Windows tiered overlay; Android
  minSdk 28; decky file table; host zerocopy/ path; scripts port
  47992 and steamos-host.md; pf-dualsense source path.
- packaging: canary version bases are tag-derived (<next-minor> via
  pf-version.sh/.ps1), codecs-extra not ffmpeg-full, document the
  pinned offline-Skia tarball + SKIA_BINARIES_URL and vulkan-headers.
- Convert 15 dangling design/*.md links to the punktfunk-planning
  prose convention (those docs live in the private planning repo).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

docs-site/content/docs/clients.md

@@ -35,9 +35,10 @@ protocol's FEC/encryption extensions, but for a healthy LAN that rarely matters.
 ## Linux desktop client (GTK4)
 
 `punktfunk-client` is the native graphical Linux client — a GTK4 / libadwaita app that speaks
-`punktfunk/1` directly, with hardware decode (VAAPI → dmabuf on Intel/AMD, software fallback),
-PipeWire audio, and SDL3 controllers (rumble, lightbar, DualSense touchpad/motion). Like the Apple
-app it discovers hosts on your network automatically, does PIN pairing, and pins reconnects.
+`punktfunk/1` directly, with hardware decode via Vulkan Video on every GPU vendor (including
+NVIDIA), falling back to VAAPI dmabuf and then software, PipeWire audio, and SDL3 controllers
+(rumble, lightbar, DualSense touchpad/motion). Like the Apple app it discovers hosts on your network
+automatically, does PIN pairing, and pins reconnects.
 
 It ships as a real package, not just a source build — full steps in
 [Install a Client](/docs/install-client#linux-desktop-flatpak):
@@ -73,14 +74,15 @@ The app is in **Google Play Internal Testing** — request a tester invite on ou
 
 `punktfunk-client` for Windows (`clients/windows`) is the native graphical client for Windows — pure
 Rust, the same `punktfunk/1` core as the Apple, Linux, and Android apps, with a **WinUI 3** UI (host
-list, settings, PIN pairing) and the video on a `SwapChainPanel`. It does D3D11VA hardware decode
-(software fallback), 10-bit/HDR present, WASAPI audio + mic, SDL3 controllers (rumble, lightbar,
-DualSense), network discovery, and the full PIN-pairing trust surface. It builds for both `x86_64`
-and `aarch64` and ships as a **signed MSIX**. Launch it and pick a host from the list, just like the
-other native apps.
+list, settings, PIN pairing); the stream itself runs in punktfunk's Vulkan presenter. Its decoder
+tries **Vulkan Video, then D3D11VA, then software**, with 10-bit/HDR present, WASAPI audio + mic,
+SDL3 controllers (rumble, lightbar, DualSense), network discovery, and the full PIN-pairing trust
+surface. It builds for both `x86_64` and `aarch64` and ships as a **signed MSIX**. Launch it and
+pick a host from the list, just like the other native apps.
 
-> The hardware-decode and HDR paths are complete but still pending validation on real GPU hardware.
-> If anything misbehaves, **[Moonlight](/docs/moonlight)** is a proven alternative for Windows.
+> Hardware decode is validated on NVIDIA and Intel GPUs; HDR10 is implemented with on-glass
+> validation still pending. If anything misbehaves, **[Moonlight](/docs/moonlight)** is a proven
+> alternative for Windows.
 
 A headless CLI path exists for scripting/measurement: