feat(machine): landscape layout and fullscreen mode

- Switch Electron window to landscape (1920x1080) with fullscreen fallback
- Rearrange IdleView for horizontal layout (logo+badges left, action cards right)
- Fix hostname command in provision/build scripts (use ip route instead of hostname -I)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

deploy/nixos/build-iso.sh

@@ -1,6 +1,8 @@
 #!/usr/bin/env bash
 # Build a bootable NixOS Live USB ISO for testing the ATM Electron app
-# on physical hardware (UpBoard).
+# on physical hardware (UpBoard, Framework, etc).
+#
+# After booting, provision credentials with: bash provision-atm.sh <atm-ip>
 #
 # Usage: bash build-iso.sh
 set -euo pipefail
@@ -50,15 +52,15 @@ echo "=== ISO built successfully ==="
 echo "File: $ISO_PATH"
 echo "Size: $ISO_SIZE"
 echo ""
-echo "--- Test in QEMU ---"
-echo "qemu-system-x86_64 -enable-kvm -m 2G \\"
-echo "  -bios /usr/share/edk2-ovmf/OVMF_CODE.fd \\"
-echo "  -cdrom $ISO_PATH -display gtk"
-echo ""
 echo "--- Write to USB flash drive ---"
 echo "sudo dd if=$ISO_PATH of=/dev/sdX bs=4M status=progress oflag=sync"
 echo ""
-echo "--- After booting, SSH in and configure ---"
-echo "ssh lamassu@<atm-ip>"
-echo "sudo nano /var/lib/lamassu-atm/.env"
-echo "sudo systemctl restart lamassu-atm"
+echo "--- Test in QEMU ---"
+echo "qemu-system-x86_64 -enable-kvm -m 2G \\"
+echo "  -drive if=pflash,format=raw,readonly=on,file=/usr/share/edk2/x64/OVMF_CODE.4m.fd \\"
+echo "  -cdrom $ISO_PATH -display gtk,zoom-to-fit=on -vga std \\"
+echo "  -device e1000,netdev=net0 -netdev user,id=net0,hostfwd=tcp::2222-:22"
+echo ""
+echo "--- After booting, provision credentials ---"
+echo "bash provision-atm.sh              # QEMU (localhost:2222)"
+echo "bash provision-atm.sh <atm-ip> 22  # Real hardware on LAN"