iso: fix packages.x86_64 (no inline comments; gstreamer-vaapi -> gst-plugin-va)

Inline comments after a package name broke kitty/flatpak (became invalid
names with trailing whitespace). gstreamer-vaapi was removed from Arch.
calamares is AUR-only -> commented pending a [tanin] rebuild decision.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

iso/build-profile/airootfs/root/customize_airootfs.sh

@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+# Runs once inside the airootfs chroot during mkarchiso.
+set -e -u
+
+# --- locale ---
+sed -i 's/#\(en_US\.UTF-8 UTF-8\)/\1/' /etc/locale.gen
+locale-gen
+
+# --- trust the [tanin] DB-signing key (so Optional TrustAll verifies) ---
+pacman-key --init
+pacman-key --populate archlinux
+pacman-key --add /etc/pacman.d/tanin-repo.gpg
+pacman-key --lsign-key 63F0415879323F6BFE0FBFB2B6FDF356206AF4F6
+
+# --- services in the LIVE image ---
+systemctl enable NetworkManager.service
+# Live boots to a console on tty1 that auto-launches the installer (cage +
+# calamares) via getty autologin + /root/.bash_profile. No display-manager.
+systemctl set-default multi-user.target
+# greetd is for the TARGET only (Calamares enables it post-install).
+systemctl disable greetd.service 2>/dev/null || true
+
+# --- plymouth: add the hook so the target initramfs shows the splash ---
+# (Calamares regenerates the initramfs on the target; this drop-in is carried
+#  over by unpackfs. 'quiet splash' goes on the kernel cmdline at install time.)
+if ! grep -q plymouth /etc/mkinitcpio.conf 2>/dev/null; then
+  sed -i 's/^\(HOOKS=.*\)\(udev\)/\1\2 plymouth/' /etc/mkinitcpio.conf 2>/dev/null || true
+fi