surface: tablet OSK, thermald, and auto-rotate defaults

[dixonSolutions]

Summary

Extends ultramarine-release-surface with tablet defaults validated on Surface Pro 9 (GNOME Wayland):

• udev: ignore keyd virtual keyboard / Video Bus in libinput so they do not suppress GNOME OSK (ID_INPUT_KEYBOARD=0 alone is not enough)
• environment.d + chrome/electron flags: Wayland text-input + --disable-gtk-ime so Chromium/Electron/QtWebEngine drive the compositor OSK (same path Firefox/Zen already use)
• thermald: conservative passive policy for sustained package heat
• gnome-auto-rotate user unit: accelerometer → gdctl when GNOME auto-rotate is enabled (no Touch Up confirm button)
• presets: enable thermald and iio-sensor-proxy

Test plan

• Build ultramarine-release with --with surface
• On Surface Pro 9 GNOME: confirm OSK can auto-show in Chrome/Electron after session reload
• Confirm volume keys still work (gpio-keys not ignored, only KEYBOARD tag cleared)
• systemctl enable --now thermald (or via preset on new image) — package temps stay saner under load
• systemctl --user enable --now gnome-auto-rotate — tilt rotates without floating button; respects orientation lock

Notes

• Auto-rotate is opt-in via the user unit (not forced on every session) so Plasma/other editions are unaffected beyond the package contents.
• Related camera kernel work: cameras: fix Surface Pro 9 rear OV13858 rotation (180°) linux-surface/linux-surface#2227 (and front MIPI in linux-surface#2171)

Made with Cursor

[madonuko]

Please test your PR

[nothingneko]

i will test this as well, thermald is an option i've been exploring for all images, but generally we like to keep anywhere platforms as in line with regular Ultramarine as possible. thermald also requires per-device setup, which complicates this, just installing and enabling it does not much