Stays masked under sway: the default backend is gtk and ScreenCast/Screenshot
route to wlr, so the hyprland portal was ~35MB of never-used daemon. Committed
as a /dev/null symlink -- that IS the systemd mask mechanism, so a checkout
restores the mask without an extra enable/mask step. Verified afterwards that
the session still exposes every portal interface.