Wire up installer, networking, and fix UEFI boot entry

- Dockerfile: compile and install orioninstall-gui + orioninstall script
- packages: add rsync, parted, arch-install-scripts, grub, efibootmgr,
  dosfstools, amd/intel-ucode, wpa_supplicant
- customize_airootfs.sh: enable NetworkManager + wpa_supplicant on boot
- orioninstall: fix UEFI (ESP at /boot, not /boot/efi); pass TIMEZONE
  and KEYBOARD into chroot heredoc; conditionalize microcode initrd lines
- menu: launch orioninstall-gui via pkexec (runs as root)
- profiledef: add file_permissions for installer binaries

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

iso/profile/profiledef.sh

@@ -29,4 +29,6 @@ file_permissions=(
     ["/usr/local/bin/orionshot"]="0:0:755"
     ["/usr/local/bin/orionclip"]="0:0:755"
     ["/usr/local/bin/orionpkg"]="0:0:755"
+    ["/usr/local/bin/orioninstall"]="0:0:755"
+    ["/usr/local/bin/orioninstall-gui"]="0:0:755"
 )