logiguard fork v2: patched GPUI on verified 8c74db0 tree

Rebuilt from the exact zed-industries/zed @ 8c74db00c4053d6c0a9037863d7bd048658da4ca
tree (previous orphan was based on a stale/wrong fetch). Same 3-file patch:
  - serial.rs: add SerialKind::KeyboardEnter
  - client.rs: store wl_keyboard.enter serial; add latest_serial_of()
  - window.rs: activate() uses keyboard-enter serial (Mutter focus gate)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Dockerfile-collab

@@ -0,0 +1,41 @@
+# syntax = docker/dockerfile:1.2
+
+FROM rust:1.94-bookworm as builder
+WORKDIR app
+COPY . .
+
+# Replace the Cargo configuration with the one used by collab.
+COPY ./.cargo/collab-config.toml ./.cargo/config.toml
+
+# Compile collab server
+ARG CARGO_PROFILE_RELEASE_PANIC=abort
+ARG GITHUB_SHA
+
+ENV GITHUB_SHA=$GITHUB_SHA
+
+# Also add `cmake`, since we need it to build `wasmtime`.
+# clang is needed because `webrtc-sys` uses Clang-specific compiler flags.
+RUN apt-get update; \
+    apt-get install -y --no-install-recommends cmake clang
+
+ENV CC=clang
+ENV CXX=clang++
+
+RUN --mount=type=cache,target=./script/node_modules \
+    --mount=type=cache,target=/usr/local/cargo/registry \
+    --mount=type=cache,target=/usr/local/cargo/git \
+    --mount=type=cache,target=./target \
+    cargo build --release --package collab --bin collab
+
+# Copy collab server binary out of cached directory
+RUN --mount=type=cache,target=./target \
+    cp /app/target/release/collab /app/collab
+
+# Copy collab server binary to the runtime image
+FROM debian:bookworm-slim as runtime
+RUN apt-get update; \
+    apt-get install -y --no-install-recommends libcurl4-openssl-dev ca-certificates \
+    linux-perf binutils
+WORKDIR app
+COPY --from=builder /app/collab /app/collab
+ENTRYPOINT ["/app/collab"]