Workstation optimization: Chrome cleanup, package purge, PCIe audit, service tuning

- Chrome/Chromium cleanup (ADR 0006): removed 10GB chromium profile, broken PWA
  shortcuts, dead BROWSER_CDP_URL from .bashrc, restored Wayland chrome-flags.conf
- Package cleanup (ADR 0007): Tier 1-4 executed, 40 packages removed (KDE Plasma,
  ruby, love, xorg-server, kscreen/kscreenlocker), 45 cascade orphans purged
- Waybar USB module: auto-mount via udisks2, yazi integration, hover details
- Service tuning: disabled bluetooth.service, NetworkManager-wait-online.service
- hypridle fix: upgraded sdbus-cpp 2.3.0->2.3.1-1 (SEGV crash loop resolved)
- PCIe audit: GPU in wrong slot (PCIEX4 vs PCIEX16), 8x bandwidth loss documented
- D-Bus cleanup: removed stale org.kde.kwalletd6.service stub
- Ansible: all changes reflected in vars/main.yml and task files

ansible/roles/maintenance/tasks/main.yml

@@ -25,4 +25,29 @@
     - "journalctl --vacuum-time=7d"
   register: maintenance_result
   changed_when: "'deleted' in maintenance_result.stdout or 'Vacuuming' in maintenance_result.stdout"
-  failed_when: false
+  failed_when: false
+
+- name: Disable unused system services
+  ansible.builtin.systemd_service:
+    name: "{{ item }}"
+    enabled: false
+    state: stopped
+  loop:
+    - bluetooth.service
+    - NetworkManager-wait-online.service
+  failed_when: false
+
+- name: Remove orphaned dependencies (pacman -Rns, iterative)
+  ansible.builtin.shell: |
+    removed_any=0
+    while orphans=$(pacman -Qdtq 2>/dev/null) && [ -n "$orphans" ]; do
+      pacman -Rns $orphans --noconfirm
+      removed_any=1
+    done
+    if [ "$removed_any" -eq 1 ]; then
+      echo "removed_orphans"
+    else
+      echo "no_orphans"
+    fi
+  register: orphan_cleanup
+  changed_when: "'removed_orphans' in orphan_cleanup.stdout"