Replace vim-lumen with custom solution that automatically switches between
ayu (dark) and everforest (light) colorschemes based on system theme.

- macOS: uses defaults read -g AppleInterfaceStyle
- Linux: checks gsettings, kreadconfig5, and COLORFGBG
- Polls every 3 seconds for theme changes
- Provides :RefreshTheme command for manual switching

Uses the importer module with extraModules to enable clan.core.state-version,
which provides automatic state version management for all machines.

Configures the state-version clan service for all machines using the
inventory.instances configuration as documented in clan-core.

Updates all inputs to latest versions

Allows for more recent packages and fixes potential evaluation issues

Evaluates all NixOS and Darwin configurations on every push and pull request.
Also checks code formatting and runs basic flake checks.

Switches from preHook to custom wrapper to properly configure MCP servers
using the claude binary path before execution

- Add mutt, claude, mpv, gh, and tea packages
- Add multiple SSH authorized keys (barnacle, yubi1, yubi2, solo2)
- Keep existing yubi_pgp key for compatibility

Makes the wrapped pass command accessible as both the original name and 'pass'

Adds 'aliases' parameter to create additional symlinks to wrapped executables.
This allows tools to be accessible under multiple names.

Downloads all files in parallel with aria2c while playing them sequentially with mpv.
Waits for each file to have content before starting playback.
Extracts basename from URLs since aria2c saves without directory structure.

- Remove identities file requirement
- Convert from writeShellApplication to makeWrapper
- Use PASS_BULK_KEY_FILE environment variable for bulk decryption
- Auto-create bulk key file from password store if needed
- Remove complex bulk operations logic

Fixes deployment error where syncthing was trying to reference machines (like mors)
that don't have syncthing IDs in the vars system.

- Update syncthing peer discovery to read from vars/per-machine//syncthing/syncthing.pub/value
- Update zerotier host discovery to read from vars/per-machine//zerotier/zerotier-ip/value
- Update syncthing key/cert references to use config.clan.core.vars.generators.syncthing.files paths

Replace all instances of config.krebs.users.lass.pubkey with hardware keys:
- self.keys.ssh.yubi_pgp
- self.keys.ssh.yubi1
- self.keys.ssh.yubi2
- self.keys.ssh.solo2

- Rename yubi.pgp to yubi_pgp.pgp
- Rename yubi.ssh to yubi_pgp.ssh
- Update all references in flake-module.nix, barnacle configuration, and yubikey.nix

- Make pass-otp accept OTP secrets via stdin or args instead of calling passage directly
- Update pass wrapper to pipe password content to pass-otp
- Remove redundant PATH export for age plugins (already in runtimeInputs)

- Add yubi2 age public key generated with age-plugin-yubikey
- Add yubi2 SSH ed25519-sk public key
- Store SSH private key encrypted with age
- Required enabling FIDO2 USB interface on YubiKey