fix(hosts): restore user home-manager wiring and refresh pi-harness deps hash

modules/hosts/tahani.nix

@@ -9,66 +9,67 @@
 	host = "tahani";
 	hostMeta = local.hosts.tahani;
 in
-	hostLib.mkUserHost {
-		system = hostMeta.system;
-		inherit host;
-		user = local.user.name;
-		includes = [
-			den.aspects.user-workstation
-			den.aspects.user-personal
-			den.aspects.email
-		];
-		homeManager = {
-			programs.nushell.extraConfig = ''
-				if $nu.is-interactive and ('SSH_CONNECTION' in ($env | columns)) and ('ZELLIJ' not-in ($env | columns)) {
-					try {
-						zellij attach -c main
-						exit
-					} catch {
-						print "zellij auto-start failed; staying in shell"
+	lib.recursiveUpdate
+	(hostLib.mkUserHost {
+			system = hostMeta.system;
+			inherit host;
+			user = local.user.name;
+			includes = [
+				den.aspects.user-workstation
+				den.aspects.user-personal
+				den.aspects.email
+			];
+			homeManager = {
+				programs.nushell.extraConfig = ''
+					if $nu.is-interactive and ('SSH_CONNECTION' in ($env | columns)) and ('ZELLIJ' not-in ($env | columns)) {
+						try {
+							zellij attach -c main
+							exit
+						} catch {
+							print "zellij auto-start failed; staying in shell"
+						}
 					}
-				}
-			'';
-		};
-	}
-	// hostLib.mkPerHostAspect {
-		inherit host;
-		includes = [
-			den.aspects.host-nixos-base
-			den.aspects.opencode-api-key
-			den.aspects.adguardhome
-			den.aspects.cache
-			den.aspects.notability
-			den.aspects.paperless
-		];
-		nixos = {...}: {
-			imports = [
-				./_parts/tahani/networking.nix
+				'';
+			};
+		})
+	(hostLib.mkPerHostAspect {
+			inherit host;
+			includes = [
+				den.aspects.host-nixos-base
+				den.aspects.opencode-api-key
+				den.aspects.adguardhome
+				den.aspects.cache
+				den.aspects.notability
+				den.aspects.paperless
 			];
+			nixos = {...}: {
+				imports = [
+					./_parts/tahani/networking.nix
+				];
 
-			networking.hostName = host;
+				networking.hostName = host;
 
-			sops.secrets.tahani-email-password =
-				secretLib.mkUserBinarySecret {
-					name = "tahani-email-password";
-					sopsFile = ../../secrets/tahani-email-password;
-				};
+				sops.secrets.tahani-email-password =
+					secretLib.mkUserBinarySecret {
+						name = "tahani-email-password";
+						sopsFile = ../../secrets/tahani-email-password;
+					};
 
-			virtualisation.docker.enable = true;
-			users.users.${local.user.name}.extraGroups = [
-				"docker"
-				"paperless"
-			];
+				virtualisation.docker.enable = true;
+				users.users.${local.user.name}.extraGroups = [
+					"docker"
+					"paperless"
+				];
 
-			systemd.tmpfiles.rules = [
-				"d /var/lib/paperless/consume 2775 paperless paperless -"
-				"d /var/lib/paperless/consume/inbox-triage 2775 paperless paperless -"
-			];
-			swapDevices = [
-				{
-					device = "/swapfile";
-					size = 16 * 1024;
-				}
-			];
-		};
-	}
+				systemd.tmpfiles.rules = [
+					"d /var/lib/paperless/consume 2775 paperless paperless -"
+					"d /var/lib/paperless/consume/inbox-triage 2775 paperless paperless -"
+				];
+				swapDevices = [
+					{
+						device = "/swapfile";
+						size = 16 * 1024;
+					}
+				];
+			};
+		})