package sessiond (aarch64 only)

It was hand-copied to /usr/local/bin, owned by no package, so it never
updated. Not built for x86_64 — the laptop hits lock-screen errors with
it. Verified both packages assemble correctly.

packaging/arch/PKGBUILD.prebuilt

@@ -14,10 +14,28 @@ depends=('gcc-libs' 'alsa-lib')
 options=('!strip')
 source=('souveraine-binary' 'souveraine.service' 'LICENSE')
 sha256sums=('SKIP' 'SKIP' 'SKIP')
+# sessiond ships on aarch64 only (the phone is its target; the laptop hit
+# lock-screen errors with it). CI drops the two files into the build dir for
+# that arch and omits them otherwise, so package() picks them up conditionally
+# rather than declaring them as sources for every arch.
+if [ "$CARCH" = aarch64 ]; then
+    source+=('souveraine-sessiond-binary' 'souveraine-sessiond.service')
+    sha256sums+=('SKIP' 'SKIP')
+fi
 
 package() {
     install -Dm755 "$srcdir/souveraine-binary" "$pkgdir/usr/bin/souveraine"
     sed 's|%h/.local/bin/souveraine|/usr/bin/souveraine|' "$srcdir/souveraine.service" \
         | install -Dm644 /dev/stdin "$pkgdir/usr/lib/systemd/user/souveraine.service"
+    # Session authority daemon, aarch64 only. Was hand-copied to
+    # /usr/local/bin and owned by no package, so it never received updates.
+    # The unit points at /usr/bin: the stale /usr/local/bin copy must be
+    # removed after installing or the old binary keeps running.
+    if [ -f "$srcdir/souveraine-sessiond-binary" ]; then
+        install -Dm755 "$srcdir/souveraine-sessiond-binary" \
+            "$pkgdir/usr/bin/souveraine-sessiond"
+        install -Dm644 "$srcdir/souveraine-sessiond.service" \
+            "$pkgdir/usr/lib/systemd/user/souveraine-sessiond.service"
+    fi
     install -Dm644 "$srcdir/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
 }

packaging/souveraine-sessiond.service

@@ -0,0 +1,13 @@
+[Unit]
+Description=Souveraine session authority (lock-before-shell, lock-past-shell-death)
+# Started explicitly from the hyprland.start hook after WAYLAND_DISPLAY is
+# imported into the user manager — same lifecycle pattern as hypridle.
+PartOf=graphical-session.target
+
+[Service]
+ExecStart=/usr/bin/souveraine-sessiond
+Restart=on-failure
+RestartSec=1
+
+[Install]
+WantedBy=graphical-session.target