feat(mullvad): add Mullvad VPN plugin

Bar widget + panel + settings to control Mullvad VPN through the
`mullvad` CLI. Replaces the official Mullvad GUI on Linux desktops.

Features:
- Bar widget: state-driven shield icon (green=connected, yellow=
  connecting, red=lockdown blocking traffic, grey=disconnected)
- Click opens panel (configurable: toggle vs panel)
- Right-click context menu (Connect/Disconnect, Open panel, Settings)
- Tooltip via TooltipService showing relay + IP when connected
- Panel header: state, current relay constraint, connect/disconnect
  button, account-expiry banner when fewer than N days remain
- Quick toggles (round-trip with the CLI):
  - Lockdown mode (kill switch)
  - Auto-connect
  - LAN sharing
- Search-first relay picker (~700 relays). Country rows by default,
  expand on search. Click a row to set the relay constraint and
  optionally connect immediately.
- Advanced (collapsed): multihop on/off + entry country, IP version
- Settings UI exposes 10 knobs (refresh interval, click action,
  click-connects, lockdown confirm, expiry warning days, etc.)
- IPC handlers at `plugin:mullvad`:
  toggle / connect / disconnect / reconnect / togglePanel /
  refresh / status / setLocation / setLockdown
- i18n: English + German

Disclosure:
This plugin was written entirely by an LLM (Claude). The maintainer
of the fork (@OCSPG) does not have prior QML experience, so structural
review of the QML is appreciated. The plugin was tested manually on
Noctalia Shell 4.7.6 with mullvad-cli 2026.1; toggling, relay
selection, multihop, and quick toggles all round-trip with the CLI.
Recommended install is the daemon-only package (mullvad-vpn-daemon)
since the plugin replaces the GUI.

Author: OCSPG

mullvad/BarWidget.qml

@@ -0,0 +1,157 @@
+import QtQuick
+import QtQuick.Controls
+import QtQuick.Layouts
+import Quickshell
+import qs.Commons
+import qs.Widgets
+import qs.Services.UI
+
+Item {
+	id: root
+
+	property var pluginApi: null
+	property ShellScreen screen
+	property string widgetId: ""
+	property string section: ""
+	property int sectionWidgetIndex: -1
+	property int sectionWidgetsCount: 0
+
+	readonly property string screenName: screen ? screen.name : ""
+	readonly property string barPosition: Settings.getBarPositionForScreen(screenName)
+	readonly property bool isVertical: barPosition === "left" || barPosition === "right"
+
+	readonly property var main: pluginApi?.mainInstance
+	readonly property string vpnState: main?.state ?? "disconnected"
+	readonly property bool locked: main?.locked ?? false
+	readonly property bool installed: main?.installed ?? false
+
+	readonly property color stateColor: {
+		if (!installed) return Color.mError
+		if (vpnState === "connected") return Color.mPrimary
+		if (vpnState === "connecting" || vpnState === "disconnecting") return Color.mTertiary
+		if (locked) return Color.mError
+		if (vpnState === "error") return Color.mError
+		return Color.mOnSurface
+	}
+
+	property real margins: Style.marginM * 2
+
+	readonly property real contentWidth: isVertical ? Style.capsuleHeight : Math.round(layout.implicitWidth + margins)
+	readonly property real contentHeight: isVertical ? Math.round(layout.implicitHeight + margins) : Style.capsuleHeight
+
+	implicitWidth: contentWidth
+	implicitHeight: contentHeight
+
+	Layout.alignment: Qt.AlignVCenter
+
+	Rectangle {
+		id: visualCapsule
+		x: Style.pixelAlignCenter(parent.width, width)
+		y: Style.pixelAlignCenter(parent.height, height)
+		width: root.contentWidth
+		height: root.contentHeight
+		radius: Style.radiusM
+		color: Style.capsuleColor
+		border.color: Style.capsuleBorderColor
+		border.width: Style.capsuleBorderWidth
+
+		Item {
+			id: layout
+			anchors.verticalCenter: parent.verticalCenter
+			anchors.horizontalCenter: parent.horizontalCenter
+			implicitWidth: iconRow.implicitWidth
+			implicitHeight: iconRow.implicitHeight
+
+			RowLayout {
+				id: iconRow
+				spacing: Style.marginXS
+
+				NIcon {
+					icon: root.installed ? "shield" : "shield-off"
+					color: root.stateColor
+				}
+
+				NText {
+					visible: !root.isVertical && (root.main?.showCityName ?? false) && root.vpnState === "connected"
+					text: root.main?.currentLocation?.city || ""
+					pointSize: Style.fontSizeXS
+					color: Color.mOnSurface
+				}
+
+				NText {
+					visible: !root.isVertical && (root.main?.showIp ?? false) && root.vpnState === "connected" && (root.main?.currentLocation?.ipv4 || "").length > 0
+					text: root.main?.currentLocation?.ipv4 || ""
+					pointSize: Style.fontSizeXS
+					font.family: Settings.data.ui.fontFixed
+					color: Color.mOnSurface
+				}
+			}
+		}
+	}
+
+	NPopupContextMenu {
+		id: contextMenu
+		model: [
+			{
+				"label": pluginApi?.tr(root.vpnState === "connected" ? "context.disconnect" : "context.connect"),
+				"action": "toggle",
+				"icon": root.vpnState === "connected" ? "shield-off" : "shield",
+				"enabled": root.installed
+			},
+			{
+				"label": pluginApi?.tr("context.open-panel"),
+				"action": "panel",
+				"icon": "menu"
+			},
+			{
+				"label": pluginApi?.tr("actions.widget-settings"),
+				"action": "widget-settings",
+				"icon": "settings"
+			}
+		]
+		onTriggered: action => {
+			contextMenu.close()
+			PanelService.closeContextMenu(screen)
+			if (action === "toggle") root.main?.toggleVpn()
+			else if (action === "panel") pluginApi?.openPanel(screen, root)
+			else if (action === "widget-settings") BarService.openPluginSettings(screen, pluginApi.manifest)
+		}
+	}
+
+	function _tooltipText() {
+		if (!root.installed) return pluginApi?.tr("state.not-installed") || ""
+		if (root.vpnState === "error") return pluginApi?.tr("state.error") || ""
+		if (root.vpnState === "connected" && root.main?.currentLocation) {
+			var loc = root.main.currentLocation
+			return pluginApi?.tr("state.connected") + ": " +
+				(loc.city || loc.country) +
+				(loc.hostname ? "\n" + loc.hostname : "") +
+				(loc.ipv4 ? "\n" + loc.ipv4 : "")
+		}
+		if (root.locked) return pluginApi?.tr("state.blocked") || ""
+		return pluginApi?.tr("state.disconnected") || ""
+	}
+
+	MouseArea {
+		id: mouseArea
+		anchors.fill: parent
+		hoverEnabled: true
+		cursorShape: Qt.PointingHandCursor
+		acceptedButtons: Qt.LeftButton | Qt.RightButton
+
+		onEntered: TooltipService.show(root, root._tooltipText(), BarService.getTooltipDirection(root.screen?.name))
+		onExited: TooltipService.hide()
+
+		onClicked: (mouse) => {
+			if (mouse.button === Qt.LeftButton) {
+				if ((root.main?.clickAction || "toggle") === "toggle") {
+					root.main?.toggleVpn()
+				} else {
+					pluginApi?.openPanel(root.screen, root)
+				}
+			} else if (mouse.button === Qt.RightButton) {
+				PanelService.showContextMenu(contextMenu, root, screen)
+			}
+		}
+	}
+}