Wire up installer, networking, and fix UEFI boot entry

- Dockerfile: compile and install orioninstall-gui + orioninstall script
- packages: add rsync, parted, arch-install-scripts, grub, efibootmgr,
  dosfstools, amd/intel-ucode, wpa_supplicant
- customize_airootfs.sh: enable NetworkManager + wpa_supplicant on boot
- orioninstall: fix UEFI (ESP at /boot, not /boot/efi); pass TIMEZONE
  and KEYBOARD into chroot heredoc; conditionalize microcode initrd lines
- menu: launch orioninstall-gui via pkexec (runs as root)
- profiledef: add file_permissions for installer binaries

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

wm/src/menu.c

@@ -17,7 +17,7 @@ static const MenuItem MENU_ITEMS[] = {
     { "Display Settings",  "arandr &"                                     },
     { "──────────────────", NULL                                           },
     { "Change Wallpaper",  "orionwallpaper --reset &"                     },
-    { "Install OrionOS",   "xterm -e bash -c 'orioninstall; exec bash' &" },
+    { "Install OrionOS",   "pkexec orioninstall-gui &"                    },
     { "──────────────────", NULL                                           },
     { "Restart OrionWM",   "pkill orionwm; sleep 0.2; orionwm &"          },
     { "Quit OrionOS",      "pkill orionwm"                                },