Keep only active GUI modules in selective-vpn-gui; archive old copies under _legacy (ignored).
Snapshot before app-launcher (cgroup/mark) work; ignore binaries/backups.