chore(ws): update nvim-flake

feat: reduce root flake.nix to just a devshell

feat: move arwen to ws and clenup orphan modules

feat: arwen as first ws

feat(lxc): lxc template package

fix(lxc/roles/base): set mutableUsers to false

feat: move proxy

feat: move oci

feat: move cloud

feat: move social

feat: move metrics

feat: move auth

fix: tamma secrets path

feat: move dns

docs: document new structure somewhat

feat: pinentry is so stupid

feat: nix-diff in devshell

chore: update nvim-flake

feat(systems/hosts/dns): change to quad9 dns10

chore: update flake inputs, don't touch nvim-flake nixpkgs