fix: resolve wifi crashes, shell injections, race conditions, and add debug mode

- Remove transient NEED_AUTH/DISCONNECTED error paths from wifi connect
- Guard double-callback in connect_wifi_bssid/connect_wifi_with_password
- Shell-quote user paths in wallpaper, screenshot, screenrecorder services
- Fix OSD hide-timer use-after-free and applet_window stale source ID
- Fix brightness poll timer leak on read failure
- Fix spotlight search stale idle source removal
- Lock dbusmenu _cache mutation under _registry_lock
- Fix entry.revision written outside _registry_lock scope
- Add fabric-cli exec wrapper for lock screen (lock_screen.lock())
- Replace hyprlock with lock screen in power menu and dropdown
- Add debug mode toggle in settings (controls log verbosity)
- Add diagnostic logging to globalmenu click chain

src/services/mpris.py

@@ -327,12 +327,14 @@ class PlayerService(Service):
         if metadata is None:
             try:
                 metadata = self._player.props.metadata
-            except Exception:
+            except Exception as e:
+                logger.debug(f"[mpris] Failed to read metadata: {e}")
                 metadata = None
         if metadata is not None:
             try:
                 dur = metadata["mpris:length"] / 1_000_000
-            except Exception:
+            except Exception as e:
+                logger.debug(f"[mpris] Failed to read duration: {e}")
                 dur = 0
             # Browser players (YouTube in Firefox/Chromium) populate
             # `mpris:artUrl` lazily and don't reliably emit the `metadata`