refactor: resolve cross-crate integration TODOs and resources discovery

Cleanup pass over items collected in docs/rewrite/INTEGRATION_TODO.md:
- OSC 133 printf-q / percent decoders live once in
  ghostty_vt::string_encoding; ghostty-os re-exports them.
- CursorStyle and clipboard codepoint map entries have one definition
  (ghostty-terminal); ghostty-config now depends on ghostty-terminal.
- ActionKey::docs() trailing blank lines fixed at the source; cli's
  workaround removed (+list-actions --docs still byte-identical).
- x11_color exposes names in original case; cli no longer re-parses
  rgb.txt.
- One cgroup scope wait loop (ghostty_os::cgroup::wait_for_scope).
- Flatpak passwd lookup implemented in ghostty-os via a local pty.
- +version shows the rustc version captured at build time.

Resources: dev builds find <workspace>/resources automatically (keeping
Ghostty's sentinel-file detection and GHOSTTY_RESOURCES_DIR);
scripts/gen-terminfo.sh (just terminfo) regenerates the compiled
terminfo; `just install [PREFIX]` installs binary, share/ghostty,
terminfo, desktop/D-Bus/systemd/metainfo files and icons.

Test Plan:
- cargo test for vt, os, config, input, cli
- diff `+list-keybinds`, `+list-actions --docs`, `+show-config --default`
  against /usr/bin/ghostty

crates/ghostty-os/src/resourcesdir.rs

@@ -64,6 +64,7 @@ fn resources_dir_impl(debug: bool, exe: Option<&Path>, env: Option<String>) -> R
     let Some(mut exe) = exe else {
         return ResourcesDir::default();
     };
+    let exe_start = exe;
 
     // We have an exe path! Climb the tree looking for the terminfo
     // bundle as we expect it.
@@ -91,9 +92,41 @@ fn resources_dir_impl(debug: bool, exe: Option<&Path>, env: Option<String>) -> R
         };
     }
 
+    // Rust-specific: development builds run out of `<workspace>/target`, where
+    // there is no installed `share/` tree. Fall back to the in-repo
+    // `<workspace>/resources` directory (it carries the same sentinel,
+    // `terminfo/x/xterm-ghostty`, see scripts/gen-terminfo.sh) if the binary
+    // lives inside this workspace.
+    if debug && let Some(dir) = dev_resources_dir(exe_start) {
+        return ResourcesDir {
+            app_path: Some(dir),
+            host_path: None,
+        };
+    }
+
     ResourcesDir::default()
 }
 
+/// The workspace root this crate was compiled in (`crates/ghostty-os/../..`).
+fn workspace_root() -> std::path::PathBuf {
+    Path::new(env!("CARGO_MANIFEST_DIR")).join("../..")
+}
+
+/// Returns `<workspace>/resources` if `exe` is inside the workspace this
+/// crate was built from and the directory contains our sentinel.
+fn dev_resources_dir(exe: &Path) -> Option<String> {
+    let root = workspace_root().canonicalize().ok()?;
+    let exe = exe.canonicalize().unwrap_or_else(|_| exe.to_path_buf());
+    if !exe.starts_with(&root) {
+        return None;
+    }
+    let res = root.join("resources");
+    SENTINELS
+        .iter()
+        .any(|s| res.join(s).exists())
+        .then(|| res.to_string_lossy().into_owned())
+}
+
 /// Little helper to check if the "base/sub/suffix" directory exists and
 /// if so return "base/sub". The "suffix" is just used as a way to verify a
 /// directory seems roughly right.
@@ -168,6 +201,19 @@ mod tests {
         );
     }
 
+    #[test]
+    fn dev_fallback_finds_workspace_resources() {
+        let exe = workspace_root().join("target/debug/ghostty");
+        let r = resources_dir_impl(true, Some(&exe), None);
+        assert!(r.app().is_some_and(|d| d.ends_with("/resources")));
+        // Outside the workspace there is no fallback.
+        let r = resources_dir_impl(true, Some(Path::new("/nonexistent/bin/x")), None);
+        assert_eq!(r.app(), None);
+        // Release builds never use it.
+        let r = resources_dir_impl(false, Some(&exe), None);
+        assert_eq!(r.app(), None);
+    }
+
     #[test]
     fn maybe_dir_checks_suffix() {
         let td = make_tree();