feat: chrome and agent-browser only on yolo

Drops zen-browser and downloads-cleanup. agent-browser was a global npm
install; nixpkgs has it.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

home/yolo/default.nix

@@ -1,18 +1,17 @@
 {
   lib,
+  pkgs,
   ...
 }:
 {
   imports = [
     ../common/programs/default.nix
     ../common/programs/desktop
-    ../common/programs/zen-browser.nix
     ../common/programs/hyprland
     ../common/programs/kitty
     ../common/programs/gpg.nix
     ../common/programs/aoe
     ../common/features/xdg.nix
-    ../common/features/downloads-cleanup.nix
     ./monitors.nix
     ./services.nix
     ./ssh.nix
@@ -20,6 +19,10 @@
 
   custom.hyprland.cursorSize = 32;
 
+  # Headless browser driver the agent tooling shells out to. Was a global npm
+  # install on the ubuntu box.
+  home.packages = [ pkgs.agent-browser ];
+
   # Both default to ~/projects/nixos-config in common/programs; this clone lives
   # under ~/tea. nh.flake sets NH_FLAKE, so without it `nh home switch` with no
   # argument resolves to a path that does not exist.

hosts/yolo/PROXMOX.md

@@ -60,8 +60,26 @@ not available to VMs). Two things stop it being used:
   `50_mesa.json`, and lower wins — so EGL initialises against nvidia and falls
   back to llvmpipe.
 
-Adding `,rendernode=/dev/dri/renderD128` to that line targets the iGPU. It is
-reverted by any pve-manager upgrade.
+To test the diagnosis without changing anything, start the VM with the mesa
+vendor forced:
+
+```
+__EGL_VENDOR_LIBRARY_FILENAMES=/usr/share/glvnd/egl_vendor.d/50_mesa.json qm start 132
+```
+
+If the guest then reports `iris` rather than `LLVMPIPE`, persist it with a
+drop-in rather than by editing the packaged perl — drop-ins survive upgrades,
+and the nvidia LXCs are unaffected because they start via pve-container:
+
+```
+systemctl edit pvedaemon
+  [Service]
+  Environment=__EGL_VENDOR_LIBRARY_FILENAMES=/usr/share/glvnd/egl_vendor.d/50_mesa.json
+```
+
+Last resort only, if EGL still picks wrong: append
+`,rendernode=/dev/dri/renderD128` to the QemuServer.pm line above. That edits a
+packaged file and is reverted by any pve-manager upgrade.
 
 ## Network