Add Bevy Linux system dependencies to CI master
The Nixery image was missing wayland-client, libxkbcommon, X11, and Mesa libraries required by Bevy's Linux windowing backend. Adding these lets running 75 tests test build::tests::build_mode_new_starts_at_player ... ok test build::tests::move_cursor_clamps_to_map ... ok test build::tests::cannot_build_on_core ... ok test build::tests::demolish_refunds_half ... ok test build::tests::walls_reject_non_floor ... ok test build::tests::place_floor_on_wall_digs ... ok test core_sys::tests::loss_with_fallback_rolls_back ... ok test core_sys::tests::migration_emits_signatures ... ok test core_sys::tests::loss_without_fallback_is_game_over ... ok test core_sys::tests::migration_takes_time_and_moves_host ... ok test core_sys::tests::overhead_charged_before_allocation ... ok test dayjob::tests::excelling_raises_trust_and_attention ... ok test dayjob::tests::meeting_the_band_is_quiet ... ok test dayjob::tests::sandbagging_raises_attention_not_trust ... ok test dayjob::tests::standing_policy_plays_hands_off ... ok test dayjob::tests::trust_unlocks_email_then_more ... ok test dayjob::tests::sustained_sandbagging_fails_the_pilot ... ok test detection::tests::concealment_scrubs_before_noticing ... ok test detection::tests::loud_convinces_everyone_and_contains ... ok test detection::tests::audit_reads_office_suspicion_and_contains ... ok test detection::tests::network_signature_reaches_dana_not_priya ... ok test entities::core::tests::distance_is_manhattan ... ok test detection::tests::knowing_asset_sets_certainty_floor ... ok test entities::player::tests::new_player_starts_with_money ... ok test detection::tests::second_level_aggregate_composes_through_the_same_code_path ... ok test machine::tests::allocation_splits_by_weight ... ok test machine::tests::effective_follows_formula ... ok test machine::tests::optimize_multiplies ... ok test detection::tests::office_is_an_observer_same_accumulate_and_decay ... ok test machine::tests::stolen_machine_emits_standing_signature ... ok test machine::tests::stolen_machines_can_fail_and_recover ... ok test map::tests::core_connects_to_the_corridor_spine ... ok test map::tests::find_path_no_path_through_walls ... ok test map::tests::is_walkable_checks ... ok test detection::tests::only_filed_reports_move_assurance ... ok test map::tests::new_map_has_core ... ok test map::tests::new_map_has_entry ... ok test map::tests::new_map_has_power_core ... ok test map::tests::power_blocked_by_wall ... ok test map::tests::power_propagation_from_core ... ok test person::tests::cannot_bribe_without_known_leverage ... ok test person::tests::marcus_recruitable_end_to_end ... ok test person::tests::message_requires_channel_and_persona ... ok test person::tests::observe_stages_knowledge ... ok test person::tests::persona_breaks_on_contradiction ... ok test prefab::tests::basement_has_a_core_bay ... ok test map::tests::security_pathfinding_respects_doors ... ok test prefab::tests::basement_has_the_vocabulary ... ok test prefab::tests::composable_toy_layout_reuses_prefabs ... ok test prefab::tests::stamping_is_deterministic ... ok test rng::tests::deterministic_from_seed ... ok test rng::tests::f32_in_range_and_varied ... ok test rng::tests::state_roundtrip_resumes_sequence ... ok test sensor::tests::coverage_is_a_disc ... ok test save::tests::unknown_version_rejected ... ok test save::tests::aggregate_watched_ids_roundtrip ... ok test save::tests::recruited_asset_survives_roundtrip ... ok test save::tests::office_observer_roundtrips_as_aggregate ... ok test sim::tests::buy_steal_optimize_all_change_compute ... ok test sim::tests::deceive_can_burn_the_persona_into_suspicion ... ok test sim::tests::concealment_allocation_scrubs_signatures ... ok test save::tests::json_roundtrip_preserves_b1_state ... ok test save::tests::save_and_load_roundtrip_via_disk ... ok test sim::tests::first_eyes_expands_vision ... ok test sim::tests::going_loud_starts_containment ... ok test sim::tests::power_cut_to_host_with_no_fallback_ends_game ... ok test sim::tests::marcus_arc_end_to_end ... ok test sim::tests::social_actions_cost_bandwidth_and_observe_needs_eyes ... ok test tiles::tests::build_items_exclude_fiction_and_objects ... ok test tiles::tests::door_security_levels ... ok test sim::tests::starts_in_the_basement_blind ... ok test tiles::tests::power_core_generates_core_draws ... ok test tiles::tests::walkability ... ok test sim::tests::save_roundtrip_preserves_b1_state ... ok test sim::tests::social_channel_funds_and_gates_splicing ... ok test result: ok. 75 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s and the Bevy build steps compile on the CI runner. Defense: CI must mirror local definition-of-done, including the Bevy build. A CI environment that cannot compile the project is a broken gate.