feat: upgrade to NixOS 25.11

- Update nixpkgs and home-manager to 25.11 release
- Update flake dependencies
- Migrate git config to settings attribute
- Replace deprecated packages (mpc-cli -> mpc, vaapiIntel -> intel-vaapi-driver)
- Fix system references to use stdenv.hostPlatform.system
- Add crowdsec module overrides
- Remove android-udev-rules from fuchsia
- Configure SSH with enableDefaultConfig = false
- Update zsh dotDir to use config.xdg.configHome

nixos/viridian/hardware-configuration.nix

@@ -39,10 +39,10 @@
     enable = true;
     extraPackages = with pkgs; [
       intel-media-driver
-      vaapiIntel
-      vaapiVdpau
       libvdpau-va-gl
+      libva-vdpau-driver
       intel-compute-runtime
+      intel-vaapi-driver
     ];
   };
 

nixos/viridian/services/crowdsec/default.nix

@@ -15,6 +15,11 @@ in {
     inputs.crowdsec.overlays.default
   ];
 
+  disabledModules = [
+    "services/security/crowdsec.nix"
+    "services/security/crowdsec-firewall-bouncer.nix"
+  ];
+
   age.secrets.enrollment-key = {
     rekeyFile = ./enrollment_key.age;
     owner = "crowdsec";