iso: resolve jack/iptables provider prompts; calamares + waypaper deps in [tanin]

- packages.x86_64: add pipewire-jack + iptables (non-interactive provider choice)
- [tanin] now also hosts calamares, python-screeninfo, python-imageio-ffmpeg
  (waypaper's AUR deps) — all built without sudo

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

iso/build-profile/packages.x86_64

@@ -127,57 +127,60 @@ xfsprogs
 xl2tpd
 zsh
 # TANINUX additions — appended to releng's packages.x86_64 by bootstrap-profile.sh.
+# IMPORTANT: pacman package lists do NOT allow inline comments. Keep every
+# comment on its own line — a stray "# ..." after a package name turns the whole
+# line into an invalid package (that was the kitty/flatpak "target not found").
 # (bootstrap also swaps the live kernel linux -> linux-zen.)
-# The live ISO IS the installable system (Calamares clones it via unpackfs).
 
-# --- the whole TANINUX desktop (niri/eww/greeter/theme/apps from [tanin]) ---
+# the whole TANINUX desktop (niri/eww/greeter/theme/apps from [tanin])
 tanin-desktop
 
-# --- kernel (zen) ---
+# kernel (zen)
 linux-zen
 linux-zen-headers
 
-# --- Btrfs + automatic snapshots (pre-update rollback via snapper) ---
+# Btrfs + automatic snapshots
 btrfs-progs
 snapper
 snap-pac
 
-# --- boot splash ---
+# boot splash
 plymouth
 
-# --- live installer (removed from target by Calamares' packages module) ---
-calamares
+# live installer: cage hosts calamares. calamares is AUR -> served from [tanin]
+# (rebuild via finish-tanin-repo.sh / the calamares one-liner in BUILD.md).
 cage
+calamares
 
-# --- target bootloader = systemd-boot (part of systemd) + UEFI var tool ---
+# target bootloader
 efibootmgr
 
-# --- partitioning / filesystems ---
+# partitioning / filesystems
 gptfdisk
 dosfstools
 e2fsprogs
 
-# --- preinstalled apps (decided) ---
+# preinstalled apps
 firefox
 thunderbird
-kitty                 # extra terminal (foot stays the niri/eww default)
+kitty
 nautilus
-flatpak               # Flathub remote configured post-install
-# paru                # AUR helper — MUST be rebuilt into [tanin] first (else build fails)
+flatpak
+#paru
 
-# --- media bundle ---
+# media (gstreamer-vaapi was removed from Arch -> gst-plugin-va is the successor)
 mpv
 loupe
 gst-plugins-good
 gst-plugins-bad
 gst-plugins-ugly
 gst-libav
-gstreamer-vaapi
+gst-plugin-va
 
-# --- fonts & emoji ---
+# fonts & emoji
 noto-fonts
 noto-fonts-emoji
 noto-fonts-cjk
 
-# --- utilities ---
+# utilities
 file-roller