terra: desktop setup, flatpak, unstable packages, key management

- Hyprland workspace rules: start-communications.sh launches telegram +
  discord into special:communications; qbz/discord/telegram switched to
  flatpak (nix-flatpak, Flathub) — removes qbz and proton-pass-cli flake
  inputs
- proton-pass-cli and claude-code sourced from nixpkgs-unstable; unstable
  pkgs set threaded into home-manager via extraSpecialArgs
- GTK/libadwaita dark theme fixed: dconf color-scheme = prefer-dark written
  declaratively instead of a per-session gsettings call
- scripts/keys: store/restore SSH host keys and sops age keys via Proton
  Pass (ssh_host#<config> / age#<config> / age#admin naming); no jq dep,
  uses pass-cli --field directly
- jq added to desktop-apps system packages

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

services/desktop/desktop-apps.nix

@@ -1,4 +1,4 @@
-{ pkgs, lib, inputs, ... }:
+{ pkgs, lib, ... }:
 
 let
   rishot = pkgs.callPackage ../../pkgs/rishot.nix { };
@@ -16,6 +16,7 @@ in
       "steam-unwrapped"
       "steam-run"
       "claude-code"
+      "proton-pass-cli"
       "vivaldi"
     ];
 
@@ -35,6 +36,7 @@ in
     kdePackages.dolphin
     vivaldi
     rishot
+    jq
     dotnetCorePackages.sdk_10_0
     nodejs
   ];