Add etc/ source tree for package-shipped /etc files

This tree is the source for omarchy-settings to install into /etc
(for paths Omarchy fully owns) or stage at /usr/share/omarchy/etc-overrides
(for paths upstream packages own, which the post_install copies into place).

Package-owned drop-ins (no upstream conflict):
- etc/docker/daemon.json
- etc/systemd/system/docker.service.d/no-block-boot.conf
- etc/systemd/resolved.conf.d/20-docker-dns.conf
- etc/systemd/resolved.conf.d/10-disable-multicast.conf
- etc/systemd/system.conf.d/10-faster-shutdown.conf
- etc/systemd/system/user@.service.d/10-faster-shutdown.conf
  (renamed from .../faster-shutdown.conf for consistency)
- etc/systemd/logind.conf.d/10-ignore-power-button.conf
  (replaces the previous in-place sed-edit of logind.conf)
- etc/gnupg/dirmngr.conf
- etc/sysctl.d/99-omarchy-sysctl.conf  (renamed from the 99-sysctl.conf
  appendage; a migration cleans up the old path on existing installs)
- etc/sysctl.d/90-omarchy-file-watchers.conf
- etc/modprobe.d/omarchy-usb-autosuspend.conf
  (renamed from disable-usb-autosuspend.conf)
- etc/sudoers.d/omarchy-asdcontrol
  (renamed from asdcontrol; $USER -> %wheel for packaging)
- etc/sudoers.d/omarchy-tzupdate
- etc/sudoers.d/omarchy-passwd-tries
  (renamed from passwd-tries for namespacing)

Etc-overrides (upstream-owned paths; staged by the PKGBUILD at
/usr/share/omarchy/etc-overrides/ and cp'd in by post_install):
- etc/security/faillock.conf (owned by pam)
- etc/nsswitch.conf (owned by filesystem)
- etc/cups/cups-browsed.conf (owned by cups-browsed)
- etc/plymouth/plymouthd.conf (owned by plymouth)

All sudoers files validate with visudo -cf.

The install scripts that previously wrote these files are updated or
removed in follow-up commits.

etc/cups/cups-browsed.conf

@@ -0,0 +1,4 @@
+# Omarchy override of cups-browsed's shipped config. The only behavioural
+# change vs the upstream default (all-commented) is enabling auto-registration
+# of remote IPP printers discovered via Avahi/mDNS.
+CreateRemotePrinters Yes

etc/docker/daemon.json

@@ -0,0 +1,6 @@
+{
+    "log-driver": "json-file",
+    "log-opts": { "max-size": "10m", "max-file": "5" },
+    "dns": ["172.17.0.1"],
+    "bip": "172.17.0.1/16"
+}

etc/gnupg/dirmngr.conf

@@ -0,0 +1,7 @@
+keyserver hkps://keyserver.ubuntu.com
+keyserver hkps://pgp.surfnet.nl
+keyserver hkps://keys.mailvelope.com
+keyserver hkps://keyring.debian.org
+keyserver hkps://pgp.mit.edu
+
+connect-quick-timeout 4

etc/modprobe.d/omarchy-usb-autosuspend.conf

@@ -0,0 +1 @@
+options usbcore autosuspend=-1

etc/nsswitch.conf

@@ -0,0 +1,19 @@
+# Name Service Switch configuration file.
+# See nsswitch.conf(5) for details.
+
+passwd: files systemd
+group: files [SUCCESS=merge] systemd
+shadow: files systemd
+gshadow: files systemd
+
+publickey: files
+
+hosts: mymachines mdns_minimal [NOTFOUND=return] resolve files myhostname dns
+networks: files
+
+protocols: files
+services: files
+ethers: files
+rpc: files
+
+netgroup: files

etc/plymouth/plymouthd.conf

@@ -0,0 +1,2 @@
+[Daemon]
+Theme=omarchy

etc/security/faillock.conf

@@ -0,0 +1,7 @@
+# Omarchy override of /etc/security/faillock.conf (upstream owned by `pam`).
+# The only behavioural change vs upstream defaults is raising `deny` from 3 to
+# 10 so users get more attempts before lockout.
+#
+# All other settings remain at upstream defaults (commented out). See
+# faillock.conf(5) for the full option list.
+deny = 10

etc/sudoers.d/omarchy-asdcontrol

@@ -0,0 +1 @@
+%wheel ALL=(ALL) NOPASSWD: /usr/bin/asdcontrol

etc/sudoers.d/omarchy-passwd-tries

@@ -0,0 +1 @@
+Defaults passwd_tries=10

etc/sudoers.d/omarchy-tzupdate

@@ -0,0 +1 @@
+%wheel ALL=(root) NOPASSWD: /usr/bin/tzupdate, /usr/bin/timedatectl

etc/sysctl.d/90-omarchy-file-watchers.conf

@@ -0,0 +1,3 @@
+# Raise inotify limits so VS Code, webpack, and similar dev tools don't hit the
+# default 8192 ceiling.
+fs.inotify.max_user_watches=524288

etc/sysctl.d/99-omarchy-sysctl.conf

@@ -0,0 +1,2 @@
+# Solve common flakiness with SSH (MTU discovery on flaky links).
+net.ipv4.tcp_mtu_probing=1

etc/systemd/logind.conf.d/10-ignore-power-button.conf

@@ -0,0 +1,2 @@
+[Login]
+HandlePowerKey=ignore

etc/systemd/resolved.conf.d/10-disable-multicast.conf

@@ -0,0 +1,2 @@
+[Resolve]
+MulticastDNS=no

etc/systemd/resolved.conf.d/20-docker-dns.conf

@@ -0,0 +1,2 @@
+[Resolve]
+DNSStubListenerExtra=172.17.0.1

etc/systemd/system.conf.d/10-faster-shutdown.conf

@@ -0,0 +1,2 @@
+[Manager]
+DefaultTimeoutStopSec=5s

etc/systemd/system/docker.service.d/no-block-boot.conf

@@ -0,0 +1,2 @@
+[Unit]
+DefaultDependencies=no

etc/systemd/system/user@.service.d/10-faster-shutdown.conf

@@ -0,0 +1,2 @@
+[Service]
+TimeoutStopSec=5s