fix(desktop): fix X permissions for server hardware (IPMI KVM)

- Add bee user to video,input groups (fixes /dev/fb0 permission denied)
- Add Xwrapper.config: needs_root_rights=yes (X gets hw access)
- Add xserver-xorg-video-vesa as fallback driver
- Remove dead bee-tui chmod from setup hook

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

iso/builder/config/hooks/normal/9000-bee-setup.hook.chroot

@@ -15,7 +15,7 @@ ensure_bee_console_user() {
     mkdir -p /home/bee
     chown -R bee:bee /home/bee
     echo "bee:eeb" | chpasswd
-    usermod -aG sudo bee 2>/dev/null || true
+    usermod -aG sudo,video,input bee 2>/dev/null || true
 }
 
 ensure_bee_console_user
@@ -39,7 +39,6 @@ chmod +x /usr/local/bin/bee-network.sh  2>/dev/null || true
 chmod +x /usr/local/bin/bee-nvidia-load 2>/dev/null || true
 chmod +x /usr/local/bin/bee-sshsetup   2>/dev/null || true
 chmod +x /usr/local/bin/bee-smoketest  2>/dev/null || true
-chmod +x /usr/local/bin/bee-tui        2>/dev/null || true
 chmod +x /usr/local/bin/bee            2>/dev/null || true
 chmod +x /usr/local/bin/bee-log-run    2>/dev/null || true
 

iso/builder/config/package-lists/bee.list.chroot

@@ -56,6 +56,7 @@ xinit
 xterm
 chromium
 xserver-xorg-video-fbdev
+xserver-xorg-video-vesa
 
 # Firmware
 firmware-linux-free

iso/overlay/etc/X11/Xwrapper.config

@@ -0,0 +1,2 @@
+allowed_users=anybody
+needs_root_rights=yes

iso/overlay/home/bee/.profile

@@ -4,5 +4,7 @@ export PATH="/usr/local/bin:$PATH"
 # so the KVM shows the graphical UI without switching VTs.
 if [ "$(tty 2>/dev/null)" = "/dev/tty1" ] \
     && [ -z "${DISPLAY:-}" ]; then
-    exec startx /usr/local/bin/bee-openbox-session -- :0 vt1 -nolisten tcp
+    startx /usr/local/bin/bee-openbox-session -- :0 vt1 -nolisten tcp
+    echo ""
+    echo "X session ended. Type 'startx' to retry or use the shell."
 fi