Add respawn and getty service config across all build targets

Getty services now use respawn = true so init restarts them on
exit. redbear-live-mini expanded with additional boot-late services
and reorganized service ordering. Device services TOML gains new
entries for hardened daemon lifecycle.

config/redbear-kde.toml

@@ -64,6 +64,7 @@ redbear-netstat = {}
 redbear-traceroute = {}
 redbear-mtr = {}
 redbear-nmap = {}
+cub = {}
 
 # Wayland protocol
 libwayland = {}
@@ -271,6 +272,7 @@ requires_weak = [
 cmd = "getty"
 args = ["2"]
 type = "oneshot_async"
+respawn = true
 """
 
 [[files]]
@@ -301,6 +303,7 @@ requires_weak = [
 cmd = "getty"
 args = ["/scheme/debug/no-preserve", "-J"]
 type = "oneshot_async"
+respawn = true
 """
 
 [[files]]