feat(sqmeta): firewall

feat(sqmeta): add qemu-guest-agent

feat: root password secret

fix(sqmeta): only format if custom

feat(sqmeta): init as first host