Squash of my previously private NixOS config's entire history, so the private development history isn't published. Any secrets left in the tree are intentional: one-time-use, publicly shareable, or not security relevant.