- Move embedded dev tools to remus (arm-gcc, stlink, etc.)
- Move yubikey-manager, basictex, gitkraken-cli to remus
- Keep shared: bitwarden, espanso, raycast, discord, ngrok
- Add dippet server packages: nginx, cloudflared, certbot, unbound
- Add dippet tools: augeas, poppler, python@3.14

- Add dippet host configuration with bore and atuin secrets
- Add dippet to flake.nix darwinConfigurations
- Add dippet host key to secrets.nix
- Re-key secrets for dippet access
- Update README with dippet info

- Add atuin-key secret to alastor for shell history sync
- Update secrets.nix to allow alastor to decrypt atuin-key
- Fix configs.nix activation script with platform-aware paths
- Restore espanso secrets from backup (was empty)
- Add warning messages instead of silent failures

dots v1