Shrink fast-shutdown, gpg, increase-file-watchers, increase-lockout-limit to runtime-only ops

Each script's static-file write moves to omarchy-settings. The scripts
keep only the runtime side: reload systemd, restart dirmngr, sysctl --system,
or (for lockout-limit) the PAM seds that have to stay scripted because
/etc/pam.d/system-auth and /etc/pam.d/sddm-autologin are upstream-owned and
need targeted line edits rather than a full-file override.

faillock.conf's deny=10 (formerly inside increase-sudo-tries.sh sed) now
rides through the etc-overrides dance in omarchy-settings.

install/config/gpg.sh

@@ -1,6 +1,4 @@
-# Setup GPG configuration with multiple keyservers for better reliability
-sudo mkdir -p /etc/gnupg
-sudo cp ~/.local/share/omarchy/default/gpg/dirmngr.conf /etc/gnupg/
-sudo chmod 644 /etc/gnupg/dirmngr.conf
+# etc/gnupg/dirmngr.conf ships via omarchy-settings. Restart dirmngr so it
+# picks up the new keyserver list and timeout.
 sudo gpgconf --kill dirmngr || true
 sudo gpgconf --launch dirmngr || true