add Java JDK/JRE selection and patches

- Created dedicated `extras/java.sh` module for modular Temurin/Adoptium repository handling and isolated GPG key management.
- Implemented selective JRE/JDK installation paths: Gaming (Minecraft) vs Development environments with version control selectors.
- Enhanced user group membership logic (`_ensure_sudo_group`) to auto-configure administrative privileges on fresh installs.
- Introduced maintenance-friendly passwordless sudo for `apt`, `systemctl`, and shutdown commands via `/etc/sudoers.d/`.
- Added home directory ownership repair utility to fix root-owned files in user directories after improper `sudo` usage.
- Enabled visual password feedback (`pwfeedback`) toggle for enhanced terminal usability during authentication prompts.
- Refactored Debian 13/Trixie repository sourcing logic to ensure idempotency and prevent backports/duplicate sources conflicts.
- Updated Bullseye legacy modules (extras.sh, repos.sh) to exclude deprecated packages (`hx`, `vscodium`) and enforce Firefox ESR defaults.
- Cleaned repository configurations by removing obsolete `bullseye-updates` source entries to prevent dependency conflicts.
- Implemented NVTOP conditional detection logic ensuring display only on active Nvidia drivers or supported architectures (Trixie/Bookworm).
- Corrected `/modules/bullseye/extras.sh` menu mappings (Programming, Dev Tools) and verified package lists excluding incompatible tools (`hx`, `vscodium`).
- Integrated ClamAV security module with daemon state management and background scan execution flows in all Security menus.
- update README.md

modules/gpu/_helpers.sh

@@ -134,6 +134,12 @@ install_mesa_stable() {
 }
 
 offer_generic_tools() {
+    if [ "$DEBIAN_VERSION" = "11" ]; then
+        if ! lsmod 2>/dev/null | grep -q "^nvidia "; then
+            echo "nvtop skipped on Bullseye — NVIDIA driver not loaded."
+            return
+        fi
+    fi
     local tool_pkgs
     tool_pkgs=$(pkg_versions nvtop vainfo)
     if _confirm "GPU Tools" "Install monitoring and info tools?\n\n${tool_pkgs}"; then

modules/gpu/amd_intel.sh

@@ -20,7 +20,11 @@ offer_amd_tools() {
     fi
 
     local pkgs
-    pkgs=$(pkg_versions "${amd_tools[@]}" nvtop vainfo)
+    if [ "$DEBIAN_VERSION" = "11" ]; then
+        pkgs=$(pkg_versions "${amd_tools[@]}" vainfo)
+    else
+        pkgs=$(pkg_versions "${amd_tools[@]}" nvtop vainfo)
+    fi
     if $corectrl_available; then
         local ctrl_ver
         ctrl_ver=$(apt-cache policy corectrl 2>/dev/null | awk 'NR==3 {print $2; exit}')
@@ -32,7 +36,11 @@ offer_amd_tools() {
         return
     fi
 
-    _run_cmd "AMD Tools" "sudo apt install -y ${amd_tools[*]} nvtop vainfo" "Installing AMD tools..."
+    if [ "$DEBIAN_VERSION" = "11" ]; then
+        _run_cmd "AMD Tools" "sudo apt install -y ${amd_tools[*]} vainfo" "Installing AMD tools..."
+    else
+        _run_cmd "AMD Tools" "sudo apt install -y ${amd_tools[*]} nvtop vainfo" "Installing AMD tools..."
+    fi
     vainfo
 
     if $corectrl_available; then
@@ -73,7 +81,18 @@ offer_intel_tools() {
     [ -d "/sys/bus/pci/drivers/xe" ]   && has_xe=true
     [ -d "/sys/bus/pci/drivers/i915" ] && has_i915=true
 
-    if $has_xe; then
+    if [ "$DEBIAN_VERSION" = "11" ]; then
+        if $has_xe; then
+            echo "Intel Xe GPU detected. No monitoring tools available on Bullseye."
+            return
+        elif $has_i915; then
+            driver_info="Classic Intel GPU detected (i915 driver)."
+            pkg_list=("intel-gpu-tools")
+        else
+            echo "Intel GPU driver not identified. No monitoring tools available on Bullseye."
+            return
+        fi
+    elif $has_xe; then
         driver_info="Modern Intel GPU detected (Xe driver).\nintel-gpu-tools is NOT compatible with Xe.\nOnly nvtop will be offered."
         pkg_list=("nvtop")
     elif $has_i915; then