chore: align IaC with today's package installs + PDF comparison docs

DevOps sync (2026-05-21):
- Remove onlyoffice-desktopeditors from absent list (actively used)
- Add gnome-keyring, rbw to common role (secrets migration)
- Add perl-image-exiftool, icoutils, innoextract-git to dev-tools
  (Windows installer inspection)
- Create fonts role: Inter, Cascadia Code, Fira, Source Sans, TeX Gyre
- Create pdf role: zathura, zathura-pdf-mupdf, python-weasyprint
- Register new roles in workstation.yml

PDF comparison:
- Add pdf-comparison docs with Quarto/Typst/Pandoc outputs
- Add batch-pdf.sh script
- Update yazi-cheatsheet.md
- Ignore .quarto/ cache

ansible/roles/common/tasks/main.yml

@@ -225,4 +225,14 @@
   shell: echo 30 > /sys/module/zswap/parameters/max_pool_percent
   become: yes
   changed_when: false
-  tags: [optimization, zswap]
+  tags: [optimization, zswap]
+
+- name: Ensure secrets management tools are installed
+  community.general.pacman:
+    name:
+      # Secrets bridge (KWallet migration)
+      - gnome-keyring
+      # Bitwarden CLI client
+      - rbw
+    state: present
+  tags: [secrets, bitwarden]