Debian support: verified build/packaging path + friend install guide

- setup-standalone.sh: falls back to system python3 -m venv + pip when
  uv isn't installed (Debian/Ubuntu path; verified on clean bookworm).
- dist/Dockerfile.debian: debian:bookworm build env for :app:packageDeb
  (needs fakeroot + /usr/share/desktop-directories — both baked in; the
  dir gap made jpackage's postinst fail with exit 3 on minimal systems).
- dist/make-release.sh: clean source tarball from HEAD.
- INSTALL-debian.md: end-to-end install for friends (source tree must
  stay on disk — the app spawns the engine from it via SHONAR_REPO).

Verified on real Debian 12 in Docker: :app:packageDeb builds
shonar-desktop_0.1.0-1_amd64.deb, apt installs it, setup-standalone.sh
provisions the engine (venv+pip path, model fetch, boot smoke test),
and the packaged binary launches under Xvfb.

dist/Dockerfile.debian

@@ -0,0 +1,10 @@
+# Builds the SHONAR Desktop .deb on real Debian 12 and smoke-tests it.
+FROM debian:bookworm
+ENV DEBIAN_FRONTEND=noninteractive
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    openjdk-17-jdk dpkg-dev curl ca-certificates unzip git fakeroot \
+    python3 python3-venv python3-pip \
+    xvfb libasound2 libfreetype6 libfontconfig1 libgl1 libxrender1 \
+    && rm -rf /var/lib/apt/lists/* \
+    && mkdir -p /usr/share/desktop-directories
+WORKDIR /build