feat: nvidia-open images, major streamlining, bugfixes, and polish (#461)

files/system/dx/etc/skel/.config/Code/User/settings.json

@@ -1,6 +0,0 @@
-{
-    "window.titleBarStyle": "custom",
-    "editor.fontFamily": "'Cascadia Code', 'Droid Sans Mono', 'monospace', monospace",
-    "telemetry.telemetryLevel": "off",
-    "gitlens.telemetry.enabled": false
-}

files/system/etc/containers/registries.d/wayblue.yaml

@@ -0,0 +1,3 @@
+docker:
+  ghcr.io/wayblueorg:
+    use-sigstore-attachments: true

files/system/etc/pki/containers/wayblue.pub

@@ -0,0 +1,4 @@
+-----BEGIN PUBLIC KEY-----
+MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE0HrfZIuVnc6fK0LjNHotudA7ym+c
+xTbDVrZb1Y1SXsdbNOsVcCojMRylp9+IE0p/YSsfuGFF64juRx7ZoJ9PpA==
+-----END PUBLIC KEY-----

files/system/usr/share/ublue-os/just/70-secureblue.just

@@ -23,6 +23,7 @@ set-kargs-hardening:
       --append-if-missing="spec_store_bypass_disable=on" \
       --append-if-missing="l1d_flush=on" \
       --append-if-missing="gather_data_sampling=force"
+      --append-if-missing="ia32_emulation=0"
     echo "Hardening kargs set."
 
 # Add additional (unstable) boot parameters for hardening (requires reboot)