feat(apps): gate rustdesk install behind remote_access prompt

run_once_40-install-apps.sh.tmpl

@@ -4,8 +4,11 @@
 
 set -euo pipefail
 
+warn() { echo ">>> [apps] WARNING: $*" >&2; }
+
 SYS="{{ .system | default "desktop" }}"
 GAMING="{{ .gaming | default false }}"
+REMOTE_ACCESS="{{ .remote_access | default false }}"
 DISTRO_ID="{{ .chezmoi.osRelease.id | default "" }}"
 
 if [ "$SYS" = "server" ]; then
@@ -25,9 +28,15 @@ case "$DISTRO_ID" in
             feishin 
 
         # AUR packages
-        echo ">>> [apps] installing AUR packages"
-        yay -Sy --noconfirm --needed \
-            appimagelauncher rustdesk vesktop-git
+        AUR_PKGS=(appimagelauncher vesktop-git)
+        if [ "$REMOTE_ACCESS" = "true" ]; then
+            AUR_PKGS+=(rustdesk)
+            echo ">>> [apps] installing AUR packages (incl. remote access tools): ${AUR_PKGS[*]}"
+        else
+            echo ">>> [apps] installing AUR packages (remote access skipped per user choice): ${AUR_PKGS[*]}"
+        fi
+        yay -Sy --noconfirm --needed "${AUR_PKGS[@]}" \
+            || warn "yay AUR install failed (see output above)"
 
         # Gaming packages
         if [ "$GAMING" = "true" ]; then