Move _toggle_privacy and its lazy state (_privacy_on, _privacy_overlay, _popout_was_visible) into gui/privacy.py. Rewire menu action, popout signal, resizeEvent, and keyPressEvent to use the controller. No behavior change. main_window.py: 3111 -> 3068 lines.