Fetch chat and workspace data in DesktopPopoutPage so the toolbar
has access to workspace agent apps for the Apps dropdown menu.

Use capture phase on the wheel handler so it fires before noVNC
forwards the event to the remote desktop. This prevents XFCE
workspace switching when scrolling to pan the desktop view.

Change toolbar from absolute positioning to flex column layout so
it takes its own space above the VNC canvas instead of overlapping
the desktop content. Applies to both sidebar panel and pop-out.

… toolbar

Command-type apps open terminal tabs when clicked, which is wrong
for the desktop context. Only show web apps (those without a command
property) in the Apps dropdown.

…pdown

Add desktop apps (Chrome) to the toolbar Apps dropdown that launch
inside the VNC session via a fire-and-forget terminal connection
with DISPLAY=:1 set. Separate from web apps (code-server) which
open in browser tabs. Desktop apps list is configurable via the
DesktopApp interface.

Use the agent's reconnecting PTY websocket API to execute desktop
app commands with DISPLAY=:1 set. Sends the command as raw text
through /api/v2/workspaceagents/{id}/pty, then closes the socket
after a short delay. No more popup windows.

…iner in fit mode

When scale mode is 'fit', enable resizeSession so the remote
desktop resolution matches the panel size. Chrome maximized
fills exactly the available space. Resizing the panel adjusts
the desktop resolution accordingly.

- Sync scaleViewport/resizeSession to RFB via ref mutation,
  triggered by rfbInstance state changes and option changes
- biome-ignore for rfbInstance dep (triggers re-run on connect)
- Add overflow-hidden on pop-out VNC container to eliminate right
  padding from canvas size mismatch

In fit mode: overflow-hidden since resizeSession makes the desktop
match the container exactly. In native mode: overflow-scroll with
hidden scrollbar styling so the wheel handler can pan without
visible scrollbars.

…n container

The offscreen div that holds the noVNC canvas was missing
overflow:hidden, so the native-resolution canvas caused
scrollbars on the inner container.

Always preventDefault+stopPropagation on wheel events in both the
sidebar panel and pop-out window. In native mode, translate to
scroll panning. In fit mode, just block. Prevents XFCE workspace
switching regardless of zoom mode or which view is active.

…n div

noVNC internally sets overflow:auto on its screen container div
(rfb.js line 236), causing scrollbars. Override it to hidden
immediately after RFB creation.

Remove resizeSession option since portabledesktop hardcodes
1920x1080 and the VNC server does not honor RFB resize requests.
Remove overflow:hidden hacks that were clipping content instead
of actually resizing. Restore clean two-mode approach:
- Fit mode: scaleViewport shrinks desktop to fit, overflow hidden
- Native mode: full resolution, hidden scrollbars, wheel panning

Remove wheel event capture, scrollRef, hidden-scrollbar styling,
and VncContainer component. The scroll-wheel panning approach
does not work well with the fixed 1920x1080 VNC framebuffer.
Both modes now use simple overflow:hidden containers.

The reconnecting PTY expects JSON messages ({data: '...'}), not
raw text bytes. Send the launch command as a JSON-encoded
ReconnectingPTYRequest so the agent actually executes it.

…launcher

Remove the Apps dropdown, DesktopApp interface, PTY launcher,
agent/workspace data fetching in pop-out, and all related plumbing.
Desktop apps are better handled as native XFCE desktop shortcuts
configured in the template startup script. The toolbar now contains
only zoom toggle, pop-out, and control buttons.

…le style

Move Take/Release control to left side of toolbar. Use subtle
variant (no outline) for both states. Rename to 'Take control'
and 'Release control' with full labels.

Scale viewport to fit the container by default so the full desktop
is visible without scrolling. Users can toggle to native resolution
with the zoom button or Ctrl+1.

Replace icon-only zoom button with labeled buttons:
- Scaling icon + 'Zoom to fit' (when in native mode)
- Maximize icon + 'Zoom to 100%' (when in fit mode)

Use bg-surface-primary for the VNC container background so the
letterbox bars in fit-to-window mode match the chat message boxes
in both light and dark themes.

noVNC hardcodes rgb(40,40,40) as its screen background, which
creates a visible mismatch with the app surface colors. Read
the --surface-primary CSS variable at connect time and apply it
to the RFB background property so the letterbox margins match
the chat message boxes in both light and dark mode.

Read the CSS variable into a local before setting rfb.background.
The previous code set an invalid value first, then read back the
getter (which returns the old screen style), producing a corrupted
hsl() string.

The chat message cards use bg-surface-secondary, which sits on top
of the surface-primary page background. Match the desktop letterbox
margins to surface-secondary so they blend with the message cards.

Extract DesktopPopoutPageView from the route component so all four
status branches (connecting, connected, error, disconnected) can be
covered by Storybook stories without needing router or WebSocket
infrastructure.

- Export DesktopConnectionStatus from desktopConstants.ts, import
  in all consumers instead of defining locally (DEREM-9)
- Add play functions to DesktopToolbar and DesktopPopoutPage stories
  to verify button callbacks and status-conditional rendering (DEREM-10)