feat(hardware): auto-detect audio, bluetooth, camera with declarative override

tests/hardware/merge_fixtures.yml

@@ -0,0 +1,37 @@
+---
+# Detected profile + declarative hardware.* -> merged profile + resolved packages.
+# Exercises union/OR/force-on, disable[] force-off, and packages[os_family] append.
+merge_fixtures:
+  - name: force-fingerprint-disable-audio-pin-ipu6
+    os_family: Archlinux
+    nvidia_driver_resolved: nouveau
+    detected: { cpu: intel, gpus: [intel], nvidia_supports_open: true, wireless: [intel], audio: [intel], fingerprint: false, bluetooth: false, camera: { uvc: false, ipu6: true } }
+    hardware:
+      fingerprint: true                 # force-on (detection missed it)
+      packages: { Archlinux: [intel-ipu6-dkms, v4l2-relayd] }
+      disable: [audio]                  # force-off audio even though detected
+      kernel_params: ["i915.enable_psr=0"]
+    expect_profile: { fingerprint: true, bluetooth: false }
+    expect_contains: [intel-ipu6-dkms, v4l2-relayd, fprintd, libfprint, v4l-utils, intel-ucode]
+    expect_excludes: [sof-firmware, alsa-ucm-conf, bluez]
+
+  - name: union-vendors-force-bluetooth
+    os_family: Debian
+    nvidia_driver_resolved: nouveau
+    detected: { cpu: amd, gpus: [amd], nvidia_supports_open: false, wireless: [], audio: [amd], fingerprint: false, bluetooth: false, camera: { uvc: false, ipu6: false } }
+    hardware:
+      wireless: [realtek]               # union: add a wireless vendor detection missed
+      bluetooth: true                   # force-on bluetooth
+    expect_profile: { fingerprint: false, bluetooth: true }
+    expect_contains: [amd64-microcode, firmware-realtek, firmware-sof-signed, bluez]
+    expect_excludes: [fprintd, v4l-utils]
+
+  - name: disable-vendor-drops-microcode-firmware-gpu
+    os_family: Archlinux
+    nvidia_driver_resolved: open
+    detected: { cpu: intel, gpus: [intel, nvidia], nvidia_supports_open: true, wireless: [intel], audio: [intel], fingerprint: false, bluetooth: false, camera: { uvc: false, ipu6: false } }
+    hardware:
+      disable: [nvidia, intel]          # drop the nvidia GPU and every intel-vendor contribution
+    expect_profile: { fingerprint: false, bluetooth: false }
+    expect_contains: [mesa, vulkan-icd-loader]
+    expect_excludes: [nvidia-open-dkms, intel-ucode, vulkan-intel, sof-firmware, linux-firmware-other]