feat(packaging): add polkit policy, systemd units and PKGBUILD

polkit/org.prx.policy

@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE policyconfig PUBLIC
+ "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
+ "http://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd">
+<policyconfig>
+
+  <vendor>prx</vendor>
+  <vendor_url>https://github.com/example/prx</vendor_url>
+
+  <!--
+    Maps the prx-helper executable to a dedicated polkit action. When the
+    unprivileged CLI runs `pkexec /usr/lib/prx/prx-helper`, polkit evaluates
+    org.prx.manage instead of the generic org.freedesktop.policykit.exec action.
+  -->
+  <action id="org.prx.manage">
+    <description>Manage prx proxy routing</description>
+    <message>Authentication is required to change proxy routing</message>
+    <defaults>
+      <allow_any>auth_admin</allow_any>
+      <allow_inactive>auth_admin</allow_inactive>
+      <allow_active>auth_admin</allow_active>
+    </defaults>
+    <annotate key="org.freedesktop.policykit.exec.path">/usr/lib/prx/prx-helper</annotate>
+  </action>
+
+</policyconfig>