Keep the personal half of the desktop in one place, and ask before installing it

Agent instructions, skills, SSH host aliases and expansion triggers are worth
having identical on every machine one person owns, and belong in none of the
shared configuration. They live in user/ now, with a manifest saying where each
piece goes and a link-user stage that puts it there.

That stage does nothing unless the machine said yes. Somebody who clones Panama
to try the desktop keeps their own ~/.claude/CLAUDE.md exactly where it was;
the question names the destinations and defaults to no. Anything displaced goes
to config/old rather than being deleted.

~/.claude/CLAUDE.md and ~/.codex/AGENTS.md were byte-identical copies of one
file, which is the drift this exists to prevent.

Also adds the vitals toggles for the battery and Claude usage readouts, which
had preferences and no way to reach them.

install

@@ -59,7 +59,9 @@ gsettings set org.gnome.desktop.session idle-delay 0 2>/dev/null || true
 # Explicit order, not glob order: change-settings runs `vicinae theme set`,
 # which needs both vicinae itself (installed by install-packages) and the
 # theme files it selects among (symlinked into place by link-dotfiles);
-# setup-identity needs the gh and git-all that install-packages provides; and
+# link-user runs before setup-identity so tracked personal content wins over
+# what the interview would otherwise seed; setup-identity needs the gh and
+# git-all that install-packages provides; and
 # install-hardware is last because MOK enrollment arms a prompt consumed at the
 # next boot and a firmware update may ask for a reboot -- a machine that reboots
 # out of the final stage has already been completely configured. New scripts
@@ -83,7 +85,7 @@ fi
 source "$PANAMA_ANSWERS"
 export PANAMA_HOSTNAME PANAMA_GIT_NAME PANAMA_GIT_EMAIL PANAMA_GIT_EDITOR \
        PANAMA_GH_LOGIN PANAMA_SSH_KEY PANAMA_NVIDIA PANAMA_MOK_HASH \
-       PANAMA_DEBLOAT PANAMA_FIRMWARE PANAMA_EXTRAS
+       PANAMA_DEBLOAT PANAMA_FIRMWARE PANAMA_EXTRAS PANAMA_USER_CONTENT
 
 # Applied here rather than in a stage, and applied early: it needs sudo, and
 # sudo is warm right now. At the end of a long unattended run the timestamp has
@@ -94,7 +96,7 @@ if [[ -n "${PANAMA_HOSTNAME:-}" ]]; then
   echo "Hostname set to: $(hostname)"
 fi
 
-STAGES=(install-packages link-dotfiles change-settings link-vicinae-scripts setup-identity install-hardware)
+STAGES=(install-packages link-dotfiles link-user change-settings link-vicinae-scripts setup-identity install-hardware)
 failed=()
 for stage in "${STAGES[@]}"; do
   script="$PANAMA_PATH/setup/scripts/$stage"