power: polkit is the module's package; without it logind refused the watcher its delay lock on a server

modules/power/README.md

@@ -80,3 +80,7 @@ declared stopped. The first version tried that and was refused on its first appl
 units are therefore not services the mesh manages. They have no install section, and the sleep
 targets want them through this module's drop-ins (`sleep.target.d`, and `suspend.target.d` with
 its three siblings) — the same way the laptop module asks for the NVIDIA driver's sleep actions.
+
+**polkit is this module's package.** logind gives a delay lock to a process that is not root only
+through polkit. A server without polkit refused the watcher with "Permission denied", and its
+sleeps and shutdowns would have gone unsaid. The module installs it; nothing else needed it there.

modules/power/module.json

@@ -2,6 +2,7 @@
   "module": "power",
   "version": "1",
   "capabilities": [
+    "package-manager",
     "service-manager"
   ],
   "claims": [
@@ -27,6 +28,11 @@
     "power_check"
   ],
   "resources": [
+    {
+      "id": "polkit",
+      "type": "package",
+      "package": "polkit"
+    },
     {
       "id": "scripts",
       "type": "archive",