Take one machine's fingerprints off everyone's desktop

The audit's second tier: values that were measurements of the author's
desktop, shipped to every machine as if they were defaults.

Settings greeted every human as Gabriel; it now greets whoever
accountsservice says is signed in, and nobody when it says nothing. The
weather shipped his home coordinates and confidently reported his forecast
anywhere on earth; it now ships unset, fetches nothing until a location is
chosen, and the location row says so. The GTK bookmarks carried seven
/home/gib paths and his file server into every file dialog; they are now
generated per machine from a template and gitignored -- Nautilus edits the
instance freely, the way settings.ini already worked one file over. Web
search routed through his personal bang redirector; the engine is now the
webSearchUrl preference with a DuckDuckGo default, read by both the script
command and the suggestions extension, which the launcher-search contract
already pins to one another. The GPU vitals path defaulted to his card1 and
lost the readout on any machine enumerated differently; a machine with
exactly one GPU now adopts it. And the Containers and Snapshots pages hide
once a scan proves their backing stack absent, instead of rendering
permanently empty on machines that never had podman or snapper.

Lesser residue swept in the same pass: the DP-2 hyprpaper block one machine
needed, the author's username-typo expansions (moved to his personal seed in
user/, where personal content belongs), a capture fallback into /home/gib,
and a parity table asserting one machine's hardware as fact.

Claude-Session: https://claude.ai/code/session_01Epx9ZC1gwm81K3jm9x9CKh

setup/scripts/link-dotfiles

@@ -255,6 +255,22 @@ for icon_file in "$PANAMA_ICON_DIR"/*.svg; do
 done
 gtk-update-icon-cache -f -t "$HOME/.local/share/icons/hicolor" 2>/dev/null || true
 
+# File-manager sidebar bookmarks, generated per machine from the template.
+# The tracked file used to carry absolute /home/<author> paths -- seven dead
+# sidebar entries in every file dialog for anyone else. Nautilus edits the
+# generated instance in place (Ctrl+D writes this file through the symlink),
+# which is exactly why it is gitignored: bookmarks are user data, not config.
+BOOKMARKS_TEMPLATE="$PANAMA_DOT/gtk-3.0/bookmarks.template"
+BOOKMARKS_FILE="$PANAMA_DOT/gtk-3.0/bookmarks"
+if [ -r "$BOOKMARKS_TEMPLATE" ]; then
+  if [ -e "$BOOKMARKS_FILE" ]; then
+    log "Keeping existing GTK bookmarks at $BOOKMARKS_FILE"
+  else
+    sed "s|\$HOME|$HOME|g" "$BOOKMARKS_TEMPLATE" > "$BOOKMARKS_FILE"
+    log "Generated GTK bookmarks for $HOME"
+  fi
+fi
+
 # The pointer theme. oreo_blue_cursors is packaged by no Fedora repository -- it
 # is a GitHub project -- so rather than download it at install time and depend on
 # a URL that can rot, the theme is vendored into this repository and exposed the