refactor: share workstation setup and boot-staged updates

Use dev-owned checkouts and one update policy on both hosts. Keep only hardware and deployment identity in host modules, use the same SDDM/UWSM workstation module in the VM, and install a host-configured manual switch command with lock regression tests.
2026-09-05 23:52:51 -05:00
parent 209f4d8bda
commit 4893fcfec0
18 changed files with 358 additions and 247 deletions
@@ -1,6 +1,8 @@
 { pkgs, ... }:

 {
+  # Preserve locally provisioned passwords on every host; never invent one.
+  users.mutableUsers = true;
  users.users.dev = {
    isNormalUser = true;
    uid = 1001;