Wire up installer, networking, and fix UEFI boot entry

- Dockerfile: compile and install orioninstall-gui + orioninstall script
- packages: add rsync, parted, arch-install-scripts, grub, efibootmgr,
  dosfstools, amd/intel-ucode, wpa_supplicant
- customize_airootfs.sh: enable NetworkManager + wpa_supplicant on boot
- orioninstall: fix UEFI (ESP at /boot, not /boot/efi); pass TIMEZONE
  and KEYBOARD into chroot heredoc; conditionalize microcode initrd lines
- menu: launch orioninstall-gui via pkexec (runs as root)
- profiledef: add file_permissions for installer binaries

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

iso/profile/packages.x86_64

@@ -50,6 +50,16 @@ brightnessctl
 # Media playback control
 playerctl
 
+# Installer dependencies
+rsync
+parted
+arch-install-scripts
+grub
+efibootmgr
+dosfstools
+amd-ucode
+intel-ucode
+
 # Arch tools
 archiso
 pacman-contrib
@@ -68,6 +78,7 @@ gzip
 
 # Network
 networkmanager
+wpa_supplicant
 dhcpcd
 
 # Misc