Initial commit: linux-provision repo

Distribution-agnostic provisioning script that sets up a new Linux machine
(Detected via lib/distro.sh - supports Debian/Ubuntu/Pop and Fedora families).

13 stages covering:
- System packages, external repos, toolchains (nvm, uv, Python)
- Shell config (zsh, oh-my-zsh, p10k), git, SSH
- Custom uv tools from ~40 git repos
- Desktop config (keybindings, hotkeys, ghostty, fonts)
- Docker, system tweaks, browser/app installs
- Custom systemd user services (porridge, swayidle, mempi-sync, etc.)
- API keys loaded from Bitwarden at shell startup

stages/08-systemd.sh

@@ -0,0 +1,96 @@
+#!/usr/bin/env bash
+# ===========================================================================
+#  Stage 08: User Systemd Services
+#  Deploys and enables Julian's custom user systemd services.
+# ===========================================================================
+#  On the Pop machine, Julian runs several custom services:
+#    - porridge.service         : Zoom meeting transcriber daemon
+#    - porridge-dictate.service : Push-to-talk transcription
+#    - pi-overview.service      : Session dashboard on port 3000
+#    - bw-ssh-keys.service      : Load Bitwarden SSH keys at boot
+#    - mempi-sync.service       : Sync memory DB to Nextcloud
+#    - mempi-sync.timer         : Run mempi-sync on boot +5min
+#    - empty_downloads.service  : Clear Downloads folder at login
+# ===========================================================================
+
+CONFIG_DIR="${SCRIPT_DIR:-$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)}/config"
+SERVICES_DIR="${CONFIG_DIR}/systemd"
+UNIT_DIR="$HOME/.config/systemd/user"
+
+mkdir -p "$UNIT_DIR"
+
+info "Deploying user systemd services..."
+
+# ---- Helper: install service file ----
+install_service_file() {
+  local src="$1"
+  local name="$2"
+  if [ -f "$src" ]; then
+    cp "$src" "$UNIT_DIR/$name"
+    ok "Installed: $name"
+  else
+    warn "Service file not found: $src (skipping)"
+  fi
+}
+
+# ---- 1. porridge.service — Zoom transcriber daemon ----
+install_service_file "$SERVICES_DIR/porridge.service" "porridge.service"
+
+# ---- 2. porridge-dictate.service — Push-to-talk transcription ----
+install_service_file "$SERVICES_DIR/porridge-dictate.service" "porridge-dictate.service"
+
+# ---- 3. pi-overview.service — Session dashboard ----
+install_service_file "$SERVICES_DIR/pi-overview.service" "pi-overview.service"
+
+# ---- 4. bw-ssh-keys.service — Load Bitwarden SSH keys at boot ----
+install_service_file "$SERVICES_DIR/bw-ssh-keys.service" "bw-ssh-keys.service"
+
+# ---- 5. mempi-sync.service + timer — Sync memory DB to Nextcloud ----
+install_service_file "$SERVICES_DIR/mempi-sync.service" "mempi-sync.service"
+install_service_file "$SERVICES_DIR/mempi-sync.timer" "mempi-sync.timer"
+
+# ---- 6. empty_downloads.service — Clear Downloads at login ----
+install_service_file "$SERVICES_DIR/empty_downloads.service" "empty_downloads.service"
+
+# ---- Enable and start services ----
+info "Enabling and starting services..."
+
+# Services that should start automatically (enabled)
+systemctl --user daemon-reload
+
+# Check which scripts from stage 07 are available before enabling services.
+# This avoids failures when running stages out of order.
+
+if [ -x "$HOME/.local/bin/porridge" ]; then
+  systemctl --user enable --now porridge.service 2>/dev/null && ok "porridge.service enabled"
+else
+  warn "porridge.service skipped (binary not found — run stage 07 first)."
+fi
+
+if [ -x "$HOME/.local/bin/porridge" ]; then
+  systemctl --user enable --now porridge-dictate.service 2>/dev/null && ok "porridge-dictate.service enabled"
+else
+  warn "porridge-dictate.service skipped (binary not found — run stage 07 first)."
+fi
+
+if [ -x "$HOME/.local/bin/pi-overview" ]; then
+  systemctl --user enable --now pi-overview.service 2>/dev/null && ok "pi-overview.service enabled"
+else
+  warn "pi-overview.service skipped (binary not found — run stage 06-uv-projects first)."
+fi
+
+if [ -f "$HOME/.local/bin/bw-load-ssh.sh" ]; then
+  systemctl --user enable bw-ssh-keys.service 2>/dev/null && ok "bw-ssh-keys.service enabled"
+else
+  warn "bw-ssh-keys.service skipped (script not found — run stage 07 first)."
+fi
+
+systemctl --user enable --now empty_downloads.service 2>/dev/null && ok "empty_downloads.service enabled" || warn "empty_downloads.service not started."
+
+# Timers
+systemctl --user enable --now mempi-sync.timer 2>/dev/null && ok "mempi-sync.timer enabled" || warn "mempi-sync.timer not started."
+
+info "===== Service Status ====="
+systemctl --user list-units --type=service --state=running 2>/dev/null | grep -E "(porridge|swayidle|pi-overview|mempi|bw-ssh|empty)" || true
+
+ok "Stage 08 complete: user systemd services deployed."