feat(waybar,sway): htop click handler, app keybinds, VPN toggle

waybar:
- cpu / custom/memory: on-click opens floating ghostty with htop
- new custom/vpn module between custom/memory and network#bond:
  shows 'VPN' coloured by interface UP flag (green up, dim down);
  on-click toggles networkctl up/down hodor; SIGRTMIN+8 used for
  instant refresh after toggle

sway:
- Super+Shift+Return -> ghostty -e yazi
- Super+Shift+b -> librewolf

vpn-toggle.sh runs networkctl (no sudo) thanks to a new polkit rule
allowing wheel-group members to invoke org.freedesktop.network1.*
without a password prompt. systemd-networkd's polkit gate is a
separate path from sudoers, so this is the idiomatic fix.

KEYBINDS.md updated for both new sway bindings.

1 files changed, 8 insertions, 0 deletions

diff --git a/dot_config/waybar/style.css b/dot_config/waybar/style.css
index f0d764d..86e546a 100644
--- a/dot_config/waybar/style.css
+++ b/dot_config/waybar/style.css
@@ -28,6 +28,14 @@ window#waybar {
   background-color: #fb4934;
 }
 
+#custom-vpn.up {
+  color: #b8bb26;
+}
+
+#custom-vpn.down {
+  color: #928374;
+}
+
 #mode {
   color: #fabd2f;
   font-weight: bold;