feat: ship Rust login manager and GitLab release pipeline

Replace the legacy Go implementation as the production path, quarantine the reference tree, add deterministic release packaging and version metadata, and run verification through GitLab CI.

extra/config.toml

@@ -1,13 +1,46 @@
-# latchd config — see src/config/config.go for all defaults.
-# only include values you want to override.
+# latchd configuration. All paths are validated before the login screen starts.
 
-# tty = 2
-# pam_service = "latchd"
-# system_shell = "/bin/sh"
-# focus_behaviour = "default"
+tty = 2
+main_log_path = "/var/log/latchd.log"
+client_log_path = "/var/log/latchd.client.log"
+pam_service = "latchd"
+system_shell = "/bin/sh"
+initial_path = "/usr/local/sbin:/usr/local/bin:/usr/bin"
 
+[x11]
+display = ":1"
+server_path = "/usr/bin/X"
+xauth_path = "/usr/bin/xauth"
+server_timeout_secs = 60
+server_log_path = "/var/log/latchd.xorg.log"
+sessions_path = "/usr/share/xsessions"
+scripts_path = "/etc/latchd/wms"
+
+[wayland]
+sessions_path = "/usr/share/wayland-sessions"
+scripts_path = "/etc/latchd/wayland"
+
+[environment_switcher]
+include_tty_shell = false
+max_display_length = 18
+
+# Power actions use an executable path and argv, never a shell command string.
+# Keep this section empty unless the installation explicitly wants console
+# power controls.
 [power_controls]
-# [[power_controls.entries]]
-# hint = "Hibernate"
-# key = "F3"
-# cmd = "systemctl hibernate"
+entries = []
+
+[accounts]
+minimum_uid = 1000
+excluded_users = []
+enumerate = true
+faillock_path = "/usr/sbin/faillock"
+faillock_config = "/etc/security/faillock.conf"
+
+[visual]
+background_enabled = true
+animations = true
+notifications = true
+reduced_motion = false
+max_wallpaper_bytes = 8388608
+# wallpaper_path = "/etc/latchd/wallpaper.png"