scripts: Prompt polkit for GUI grok-bot auto-update

Desktop Exec=grok-bot has no TTY, so interactive sudo cannot
prompt and auto-update is skipped. Try sudo -n, then pkexec of a
grok-bot-bin-only helper (auth_admin, not NOPASSWD), then
interactive sudo on a TTY. Cancel or deny still launches the
installed binary.

#16

.SRCINFO

@@ -1,7 +1,7 @@
 pkgbase = grok-bot-bin
 	pkgdesc = Grok Bot desktop agent (official .deb repackaged)
 	pkgver = 0.39.0
-	pkgrel = 1
+	pkgrel = 2
 	url = https://cursor.com/download/bot
 	arch = x86_64
 	license = LicenseRef-proprietary
@@ -19,6 +19,7 @@ pkgbase = grok-bot-bin
 	depends = xdg-utils
 	optdepends = libappindicator-gtk3: tray icon support
 	optdepends = curl: auto-update check on launch
+	optdepends = polkit: graphical password prompt for desktop auto-update (pkexec)
 	provides = grok-bot
 	provides = sand
 	conflicts = grok-bot
@@ -28,8 +29,12 @@ pkgbase = grok-bot-bin
 	options = !debug
 	source = https://downloads.cursor.com/grokbot/stable/d8bc9c753edddb313047c9c69b480b7f8f321087/linux/x64/grok-bot_0.39.0_amd64.deb
 	source = grok-bot-launch.sh
+	source = pkexec-pacman-u
+	source = com.s1d3sw1ped.grok-bot-bin.policy
 	noextract = grok-bot_0.39.0_amd64.deb
 	sha256sums = ae498adaf71f9ff1734a786163c5807fa50165acb5aa102bb68f43ead96de4fe
-	sha256sums = 1c5a3599db15816caa839fc9e088ba9798757e44fec89c066ef5f6f3c0972aee
+	sha256sums = 36e1c522f7a3920a850a6235263d82ad5990611612979447c1e9eff92548ac1e
+	sha256sums = e92ea4534d864d7f302a082a8717a52af9675195af41092d18f15094f74fed45
+	sha256sums = a9533dfe4d31332ac1505d2e582eff27771dd0107108a5f6289d0d3839431a74
 
 pkgname = grok-bot-bin