Add a privacy policy, document report, and serve the fonts ourselves

The new Privacy page, linked from the footer, says what reaches Federated
Computer: what our servers see when machines install, update or check
for updates, and what error reports contain, where they go and how long
they're kept. The Utilities page describes report, and the System page
lists it among the installed commands.

Inter and JetBrains Mono are now served from the site, with their
licenses, instead of from Google Fonts, so a visit contacts no third
party.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

content/utilities.md

@@ -83,6 +83,22 @@ sections:
   - type: callout
     text: "To keep a package you use directly off that list for good, run `sudo pacman -D --asexplicit <package>`. And if an update ever barfs, check the **Latest News** on [archlinux.org](https://archlinux.org) for fixes."
 
+  - type: text
+    id: report
+    kicker: "report"
+    headline: "When something goes wrong, tell us."
+    body: |
+      If an install or update fails, it offers to send its log to the CoreDesktop team, so we can find the problem and fix it for everyone:
+
+      ```
+      Send this log to the CoreDesktop team, so we can look into what went wrong?
+      [v] view what would be sent, [y] send, [N] don't send:
+      ```
+
+      Nothing is sent unless you say yes, and nothing is asked when there's no one at the terminal. Press `v` to read exactly what would be sent. Before anything leaves your machine, your user name, host name, home folder, email addresses, IP addresses and Tailscale names are replaced. Along with the log go CoreDesktop's version, the kernel's, the names of the steps that failed, and your sibling projects' versions. You get a report ID to mention if you contact us. The [privacy policy](/privacy/#error-reports) says what happens to a report.
+
+      To send a log later, run `report` for the newest one, or `report <file>` for another from `~/.local/state/coredesktop/logs/`. `report --view` shows what would be sent and sends nothing.
+
   - type: command
     id: refresh
     kicker: "refresh"