Fedora support + local auth history (visage history)

[gilbertronaldo]

Tested on Fedora 44 (x86_64), GNOME/Wayland, ASUS Zenbook 14 UM3406KA (Shinetech 3277:0055, IR node /dev/video2).

Commit 1 — Fedora install script + guide:

• scripts/install-fedora.sh: idempotent build+install without RPM packaging (deps, release build, /usr/local/bin + /usr/lib64/security, D-Bus policy, visage-has-session helper, both systemd units, SELinux restorecon, model download, daemon start). Flags: --no-build, --no-enroll.
• docs/fedora.md: per-service PAM wiring (never system-auth, authselect overwrites it), GNOME lock screen + keyring gate, suspend/resume, 3277:0055 hardware notes, troubleshooting, uninstall.
• README + operations-guide: Fedora sections point at the new guide.

Commit 2 — local auth history (visage history):

• every verify outcome lands in auth_attempts in faces.db (user, time, match, similarity, model, reason, caller UID), via root-only D-Bus History + visage history CLI
• text-only: no images, no embeddings; liveness rejects stay plain non-match so history leaks no recognition info; writes are best-effort and never fail a login
• migration is CREATE TABLE IF NOT EXISTS, existing DBs upgrade in place

Verified on this machine: cargo check + cargo test green, visaged 0.4.0 active, 11 models enrolled, sudo + GDM unlock face auth works, sudo visage history shows live rows.