logiguard fork: GPUI xdg-activation keyboard-focus serial fix

Single-commit orphan branch: full zed-industries/zed @ 8c74db0 source tree
with a 3-file patch applied (no upstream history).

Patch (crates/gpui_linux/src/linux/wayland/):
  - serial.rs: add SerialKind::KeyboardEnter
  - client.rs: store wl_keyboard.enter serial; add latest_serial_of()
  - window.rs: activate() uses keyboard-enter serial (Mutter focus gate)

Mutter honors window activation only when the token carries the keyboard-
focus serial from wl_keyboard.enter; GPUI used a stale mouse-press serial.
See docs/tray-window-focus-wayland.md in logiguard.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

script/lib/blob-store.ps1

@@ -0,0 +1,68 @@
+function UploadToBlobStoreWithACL {
+    param (
+        [string]$BucketName,
+        [string]$FileToUpload,
+        [string]$BlobStoreKey,
+        [string]$ACL
+    )
+
+    # Format date to match AWS requirements
+    $Date = (Get-Date).ToUniversalTime().ToString("r")
+    # Note: Original script had a bug where it overrode the ACL parameter
+    # I'm keeping the same behavior for compatibility
+    $ACL = "public-read"
+    $ContentType = "application/octet-stream"
+    $StorageClass = "STANDARD"
+
+    # Create string to sign (AWS S3 compatible format)
+    $StringToSign = "PUT`n`n${ContentType}`n${Date}`nx-amz-acl:${ACL}`nx-amz-storage-class:${StorageClass}`n/${BucketName}/${BlobStoreKey}"
+
+    # Generate HMAC-SHA1 signature
+    $HMACSHA1 = New-Object System.Security.Cryptography.HMACSHA1
+    $HMACSHA1.Key = [System.Text.Encoding]::UTF8.GetBytes($env:DIGITALOCEAN_SPACES_SECRET_KEY)
+    $Signature = [System.Convert]::ToBase64String($HMACSHA1.ComputeHash([System.Text.Encoding]::UTF8.GetBytes($StringToSign)))
+
+    # Upload file using Invoke-WebRequest (equivalent to curl)
+    $Headers = @{
+        "Host" = "${BucketName}.nyc3.digitaloceanspaces.com"
+        "Date" = $Date
+        "Content-Type" = $ContentType
+        "x-amz-storage-class" = $StorageClass
+        "x-amz-acl" = $ACL
+        "Authorization" = "AWS ${env:DIGITALOCEAN_SPACES_ACCESS_KEY}:$Signature"
+    }
+
+    $Uri = "https://${BucketName}.nyc3.digitaloceanspaces.com/${BlobStoreKey}"
+
+    # Read file content
+    $FileContent = Get-Content $FileToUpload -Raw -AsByteStream
+
+    try {
+        Invoke-WebRequest -Uri $Uri -Method PUT -Headers $Headers -Body $FileContent -ContentType $ContentType -Verbose
+        Write-Host "Successfully uploaded $FileToUpload to $Uri" -ForegroundColor Green
+    }
+    catch {
+        Write-Error "Failed to upload file: $_"
+        throw $_
+    }
+}
+
+function UploadToBlobStorePublic {
+    param (
+        [string]$BucketName,
+        [string]$FileToUpload,
+        [string]$BlobStoreKey
+    )
+
+    UploadToBlobStoreWithACL -BucketName $BucketName -FileToUpload $FileToUpload -BlobStoreKey $BlobStoreKey -ACL "public-read"
+}
+
+function UploadToBlobStore {
+    param (
+        [string]$BucketName,
+        [string]$FileToUpload,
+        [string]$BlobStoreKey
+    )
+
+    UploadToBlobStoreWithACL -BucketName $BucketName -FileToUpload $FileToUpload -BlobStoreKey $BlobStoreKey -ACL "private"
+}