trimounts: bump blog for world well, hoist, and prose pass

wisp: periphery needs `which` to find git; stolas emulates aarch64 for the multiarch builder

trimounts: drop ci.klbr.net/bonsai (albedo's perf live CI is gone), its token, rate limits and the tunnel's 18899 listen

wisp: copy the CA bundle into /etc instead of linking it

sharkgirl as a NixOS host, on a docker-host module split from the edge

baal: the US-east wisp edge as a NixOS host (aarch64-linux)

wisp: sjo1 as a NixOS host, sharing an UpCloud module with sin1

sin1: use the scripted stage 1, which handles NIXOS_LUSTRATE

wisp edge: periphery needs openssl to generate its TLS certificate

buer: bring the 1 GB headscale VPS into ark

chernobog: build udiskie without its keyring tests