fix: lock-screen, confirm-tier, and mail-folder audit bugs

Lock screen: slock is X11-only and never grabbed the Wayland session, so C-; ! l silently did nothing. On Wayland the locker now runs loginctl lock-session, which logind turns into a Lock signal that hypridle handles by running hyprlock, the same path idle and before-sleep locking already use. X11 keeps slock. system-commands.el now also requires host-environment, which it used at load time but never declared.

Confirmation tier: the global (fset 'yes-or-no-p 'y-or-n-p) plus use-short-answers t both flattened yes-or-no-p to a single keystroke, so the deliberate strong-confirm tier for irreversible actions was dead. A stray space could power off the machine or destroy files. I added cj/confirm-strong, which binds use-short-answers nil for one call to force a typed "yes", and routed the six irreversible sites through it (shutdown/reboot, permanent file destruction, file overwrites). I dropped the redundant fset and kept use-short-answers t so ordinary prompts stay single-key.

Mail folders: the cmail context set no trash folder, so D fell back to a nonexistent /trash, and no context set a refile folder, so r targeted a nonexistent /archive everywhere. Accepting mu4e's offer to create the maildir stranded mail where mbsync never syncs it. cmail now trashes to /cmail/Trash. Refile is computed per message rather than per context, because mu4e context :vars are sticky and a per-context refile would leak one account's archive folder into another. cmail archives to /cmail/Archive. The Gmail-backed accounts have no synced archive maildir, so they signal rather than move mail into an unsynced folder.

Lock and confirm-tier need a daemon restart to fully take effect. The mail changes apply on next mu4e open.

1 files changed, 3 insertions, 2 deletions

diff --git a/modules/music-config.el b/modules/music-config.el
index fd619d8cd..799db1333 100644
--- a/modules/music-config.el
+++ b/modules/music-config.el
@@ -95,6 +95,7 @@
 (require 'user-constants)
 (require 'keybindings)  ;; provides cj/custom-keymap
 (require 'cj-window-toggle-lib)  ;; side-window size memory (F10 toggle)
+(require 'system-lib)            ;; cj/confirm-strong (overwrite confirms)
 
 ;;; Settings (no Customize)
 
@@ -371,7 +372,7 @@ Offers completion over existing names but allows new names."
          (filename (if (string-suffix-p ".m3u" chosen) chosen (concat chosen ".m3u")))
          (full (expand-file-name filename cj/music-m3u-root)))
     (when (and (file-exists-p full)
-               (not (yes-or-no-p (format "Overwrite %s? " filename))))
+               (not (cj/confirm-strong (format "Overwrite %s? " filename))))
       (user-error "Aborted saving playlist"))
     (with-current-buffer (cj/music--ensure-playlist-buffer)
       (let ((emms-source-playlist-ask-before-overwrite nil))
@@ -924,7 +925,7 @@ For URL tracks: decoded URL."
          (file (expand-file-name (concat safe "_Radio.m3u") cj/music-m3u-root))
          (content (format "#EXTM3U\n#EXTINF:-1,%s\n%s\n" name url)))
     (when (and (file-exists-p file)
-               (not (yes-or-no-p (format "Overwrite %s? " (file-name-nondirectory file)))))
+               (not (cj/confirm-strong (format "Overwrite %s? " (file-name-nondirectory file)))))
       (user-error "Aborted creating radio station"))
     (with-temp-file file
       (insert content))