SDL fallback, partition fix, lz4 remote streaming, delay-oobe-run

SDL display:
- try SDL, auto-fallback to headless if it fails (no crash)
- SDL_VIDEODRIVER=x11 to avoid wayland socket path issues
- suppress XDG_RUNTIME_DIR warnings

Disk copy:
- zap-all before writing to clear old partition tables
- delete recovery partition (4) before resizing partition 3
- use parted resizepart (preserves partition GUID for BCD)
- remote: nix-shell for sgdisk/parted/ntfsresize on target
- remote: lz4 compression for faster streaming
- remote: pv progress bar with disk size
- -y/--yes flag to skip confirmation prompt

Generalize:
- delay-oobe-run=true defers OOBE + activation to real hardware
- clean cached Autounattend from Windows\Panther before sysprep
- taskkill sysprep.exe on first login (CopyProfile artifact)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

lib/images/windows/helpers/customizeImage.nix

@@ -80,32 +80,36 @@
       chmod +w vars.fd
 
       VMIX_DISPLAY="-nographic"
-      ${lib.optionalString (displayArg != null) ''VMIX_DISPLAY="${displayArg}"''}
-      ${lib.optionalString (displayArg == null) ''
+      ${lib.optionalString (vncDisplay != null) ''VMIX_DISPLAY="-vnc ${vncDisplay}"''}
+      ${lib.optionalString (vncDisplay == null) ''
         VMIX_DF=$(ls -t /tmp/.vmix-display-* 2>/dev/null | head -1)
         if [ -n "$VMIX_DF" ]; then
           export DISPLAY=$(cat "$VMIX_DF")
           export HOME=$(mktemp -d)
           export XDG_RUNTIME_DIR=$HOME
+          export SDL_VIDEODRIVER=x11
           VMIX_DISPLAY="-display sdl"
         fi
       ''}
 
       echo "=== vmix: booting Audit Mode for ${name} ==="
-      timeout 1800 qemu-system-x86_64 \
-        $VMIX_DISPLAY \
-        -accel kvm \
-        -m ${toString memSize} \
-        -smp ${toString smp} \
-        -cpu host \
-        -machine type=q35 \
+      QEMU_ARGS="-accel kvm -m ${toString memSize} -smp ${toString smp} -cpu host -machine type=q35 \
         -drive if=pflash,format=raw,readonly=on,file=${pkgs.OVMF.fd}/FV/OVMF_CODE.fd \
         -drive if=pflash,format=raw,file=vars.fd \
         -rtc base=localtime,clock=host \
         -device qemu-xhci -device usb-tablet \
         -drive file=${resultImg},format=qcow2,if=virtio \
         ${cdromArgs} \
-        -nic user,model=virtio-net-pci
+        -nic user,model=virtio-net-pci"
+
+      timeout 1800 qemu-system-x86_64 $VMIX_DISPLAY $QEMU_ARGS || \
+        if [[ "$VMIX_DISPLAY" == "-display sdl" ]]; then
+          echo "=== vmix: SDL failed, retrying headless ==="
+          cp ${pkgs.OVMF.fd}/FV/OVMF_VARS.fd vars.fd && chmod +w vars.fd
+          timeout 1800 qemu-system-x86_64 -nographic $QEMU_ARGS
+        else
+          exit 1
+        fi
 
       echo "=== vmix: audit script ${name} complete ==="
     '';