nix and nixos configs

docs/superpowers/: hardened NixOS module plan and design spec master

- Plan: implementation plan with 14 iteration fixes and runtime verification - Design spec: module architecture, testing strategy, security analysis