package secrets and machined too

All four repo binaries were hand-copied to the phone and owned by no
package. secrets/machined ship on both arches; sessiond stays aarch64.
secrets unit repointed /usr/local/bin -> /usr/bin.

packaging/arch/PKGBUILD.prebuilt

@@ -12,8 +12,12 @@ url="https://gitea.wiuf.net/Fimeg/souveraine"
 license=('MIT')
 depends=('gcc-libs' 'alsa-lib')
 options=('!strip')
-source=('souveraine-binary' 'souveraine.service' 'LICENSE')
-sha256sums=('SKIP' 'SKIP' 'SKIP')
+source=('souveraine-binary' 'souveraine.service'
+        'souveraine-secrets-binary' 'souveraine-secrets.service'
+        'org.freedesktop.secrets.service'
+        'souveraine-machined-binary' 'souveraine-machined.service'
+        'LICENSE')
+sha256sums=('SKIP' 'SKIP' 'SKIP' 'SKIP' 'SKIP' 'SKIP' 'SKIP' 'SKIP')
 # sessiond ships on aarch64 only (the phone is its target; the laptop hit
 # lock-screen errors with it). CI drops the two files into the build dir for
 # that arch and omits them otherwise, so package() picks them up conditionally
@@ -37,5 +41,18 @@ package() {
         install -Dm644 "$srcdir/souveraine-sessiond.service" \
             "$pkgdir/usr/lib/systemd/user/souveraine-sessiond.service"
     fi
+    # Secrets rail (user service, owns org.freedesktop.secrets) and machined
+    # (system service, machine identity). Both were hand-copied to the phone
+    # and owned by no package — same gap as sessiond.
+    install -Dm755 "$srcdir/souveraine-secrets-binary" "$pkgdir/usr/bin/souveraine-secrets"
+    install -Dm644 "$srcdir/souveraine-secrets.service" \
+        "$pkgdir/usr/lib/systemd/user/souveraine-secrets.service"
+    install -Dm644 "$srcdir/org.freedesktop.secrets.service" \
+        "$pkgdir/usr/share/dbus-1/services/org.freedesktop.secrets.service"
+
+    install -Dm755 "$srcdir/souveraine-machined-binary" "$pkgdir/usr/bin/souveraine-machined"
+    install -Dm644 "$srcdir/souveraine-machined.service" \
+        "$pkgdir/usr/lib/systemd/system/souveraine-machined.service"
+
     install -Dm644 "$srcdir/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
 }

packaging/souveraine-secrets.service

@@ -13,7 +13,7 @@ Requires=dbus.socket
 [Service]
 Type=dbus
 BusName=org.freedesktop.secrets
-ExecStart=/usr/local/bin/souveraine-secrets
+ExecStart=/usr/bin/souveraine-secrets
 Restart=on-failure
 RestartSec=5
 Environment=RUST_LOG=info