konishi: autologin straight into hyprlock

SDDM auto-logs naps62 in and Hyprland locks immediately via hyprlock
(exec-once), so a cold boot lands on the themeable lock screen instead of
the SDDM greeter. Safe here (no FDE makes SDDM-vs-autologin marginal) and it
lets Moonlight reach the box after a cold boot, not just from suspend, since
Sunshine only runs once a session exists. konishi-only.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

home/konishi/default.nix

@@ -36,6 +36,10 @@
 
   wayland.windowManager.hyprland.settings = {
     exec-once = [
+      # boot-into-lock: paired with SDDM autologin (host config), lock the
+      # session the moment Hyprland starts so a cold boot lands on hyprlock, not
+      # an open desktop. A brief flash before it paints is possible.
+      "hyprlock"
       "$HOME/.local/bin/hyprpaper-rotate"
     ];