feat(packaging): 4-package .deb/.rpm build system under /opt

Shared venv architecture: meshbay-common owns the Python venv with all
pip deps pre-installed; hub and node add only their code into it.
Client is a standalone Electron app. No pip runs at install time.

- Add build scripts (packaging/build/) for common, hub, node, client
- Add orchestrator build-packages.sh with deb/rpm auto-detection
- Add .deb control/postinst for all 4 packages
- Add .rpm specs for all 4 packages (replaces python3-meshbay-common)
- Add Gnome .desktop launcher and icon resizing
- Add firewalld services (meshbay-cast, meshbay-node) and UFW profiles
- Update systemd units to use /opt/meshbay-common/venv/bin/ paths
- TMDB token baked into node package at build time via QE/node.env
- Fix package-lock.json sync for protobufjs override

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

1 files changed, 25 insertions, 0 deletions

diff --git a/packaging/rpm/meshbay-common.spec b/packaging/rpm/meshbay-common.spec
new file mode 100644
index 0000000..e1088d4
--- /dev/null
+++ b/packaging/rpm/meshbay-common.spec
@@ -0,0 +1,25 @@
+Name:           meshbay-common
+Version:        __VERSION__
+Release:        1%{?dist}
+Summary:        MeshBay shared Python runtime and libraries
+License:        AGPLv3+
+URL:            https://meshbay.org
+
+AutoReqProv:    no
+
+%description
+Shared Python virtual environment, cryptographic primitives
+(Ed25519, X25519, GEK wrap/unwrap, ChaCha20-Poly1305), protocol types
+(MNP, MHP), and all pip dependencies used by meshbay-hub and meshbay-node.
+
+Installs to /opt/meshbay-common/venv/.
+
+%install
+cp -a %{_staging_root}/* %{buildroot}/
+
+%files
+/opt/meshbay-common
+
+%changelog
+* Sun Aug 31 2026 MeshBay Team <team@meshbay.org> - %{version}-1
+- Packaging overhaul: shared venv under /opt/meshbay-common/venv/