feat(maestro): run the daemon and web UI on yolo

Adds the maestro flake as an input and imports its Home Manager module.
yolo enables both user services; web binds 0.0.0.0:8081 because aoe-web
already holds 8080 on this host.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

home/yolo/default.nix

@@ -31,6 +31,7 @@ in
     ../common/programs/kitty
     ../common/programs/gpg.nix
     ../common/programs/aoe
+    ../common/programs/maestro
     ../common/features/xdg.nix
     ./monitors.nix
     ./services.nix

home/yolo/services.nix

@@ -26,6 +26,21 @@ in
     pkgs.claude-agent-acp
   ];
 
+  # maestro's own units come from its flake module, not from the hand-written
+  # set below. 8081, not 8080: aoe-web already has that port on this host.
+  # There is no auth layer, so 0.0.0.0 is only safe behind the LAN perimeter.
+  services.maestro = {
+    enable = true;
+    web.enable = true;
+    settings = {
+      daemon.bind_addr = "127.0.0.1:7070";
+      web = {
+        bind_addr = "0.0.0.0:8081";
+        daemon_url = "http://127.0.0.1:7070";
+      };
+    };
+  };
+
   systemd.user.services = {
     rev = {
       Unit = {