feat: install codex cli, add yolo ssh host aliases

cliPackage only points the desktop app at codex; it never put the cli on
PATH, so `codex` was missing.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

home/common/programs/codex.nix

@@ -9,6 +9,10 @@ in
 {
   imports = [ inputs.codex-desktop-linux.homeManagerModules.default ];
 
+  # cliPackage only tells the desktop app where to find codex; it does not put
+  # it on PATH, so the cli needs installing separately.
+  home.packages = [ codex-cli ];
+
   programs.codexDesktopLinux = {
     enable = true;
     cliPackage = codex-cli;

home/yolo/default.nix

@@ -15,6 +15,7 @@
     ../common/features/downloads-cleanup.nix
     ./monitors.nix
     ./services.nix
+    ./ssh.nix
   ];
 
   custom.hyprland.cursorSize = 32;

home/yolo/ssh.nix

@@ -0,0 +1,43 @@
+_:
+# Homelab host aliases, yolo-only. Ported from the hand-written ~/.ssh/config
+# on the Ubuntu box.
+{
+  programs.ssh.settings = {
+    "grafana" = {
+      HostName = "10.6.10.30";
+      User = "root";
+      IdentityFile = "~/.ssh/crowdsec-loki-10.6.10.30";
+    };
+
+    "jellyfin" = {
+      HostName = "10.6.10.18";
+      User = "root";
+      IdentityFile = "~/.ssh/crowdsec-loki-10.6.10.30";
+    };
+
+    "authelia" = {
+      HostName = "10.6.10.42";
+      User = "root";
+      IdentityFile = "~/.ssh/authelia-10.6.10.42";
+    };
+
+    "whisper" = {
+      HostName = "10.6.10.43";
+      User = "root";
+      IdentityFile = "~/.ssh/wyoming-voice";
+      IdentitiesOnly = true;
+      StrictHostKeyChecking = "accept-new";
+    };
+
+    "proxmox" = {
+      HostName = "10.1.10.3";
+      Port = 22022;
+      User = "root";
+      IdentityFile = "~/.ssh/proxmox-temp";
+      # Was `crowdsec-loki` in the hand-written config, which is no longer a
+      # Host — same machine, now aliased `grafana`.
+      ProxyJump = "grafana";
+      StrictHostKeyChecking = "accept-new";
+    };
+  };
+}