refactor(hosts): move shared config into hosts/common

Assisted-by: pi (claude-opus-5)

.sops.yaml

@@ -13,7 +13,7 @@ keys:
     - &pleione age1mhlh8lj8jv58xy9mdhsarfyanckyx8c2xdu09xrn23nrc56e94xserztxx
     - &mgc age1znn83s2w8s6manxmfj488kmrrmp49s2497qvz5kk25xajfyn7cfqk8meu5
 creation_rules:
-  - path_regex: hosts/secrets.ya?ml$
+  - path_regex: hosts/common/secrets.ya?ml$
     key_groups:
     - age:
       - *atlas

hosts/nixos/common/optional/wireless.nix

@@ -1,5 +1,5 @@
 {...}: {
-  imports = [../../../wireless.nix];
+  imports = [../../../common/wireless.nix];
 
   hardware.bluetooth = {
     enable = true;

hosts/nixos/common/users/gabriel/default.nix

@@ -62,11 +62,11 @@ in {
       neededForUsers = true;
     };
     brave_api_key = {
-      sopsFile = ../../../../secrets.yaml;
+      sopsFile = ../../../../common/secrets.yaml;
       owner = "gabriel";
     };
     kagi_session_token = {
-      sopsFile = ../../../../secrets.yaml;
+      sopsFile = ../../../../common/secrets.yaml;
       owner = "gabriel";
     };
   };

hosts/system-manager/common/optional/wireless.nix

@@ -1,5 +1,5 @@
 {...}: {
-  imports = [../../../wireless.nix];
+  imports = [../../../common/wireless.nix];
 
   # The upstream module emits no country line; Ubuntu's netplan-generated
   # config used to set this, and dropping it would silently relax the

hosts/system-manager/common/users/gabriel/default.nix

@@ -41,11 +41,11 @@ in {
 
   sops.secrets = {
     brave_api_key = {
-      sopsFile = ../../../../secrets.yaml;
+      sopsFile = ../../../../common/secrets.yaml;
       owner = "gabriel";
     };
     kagi_session_token = {
-      sopsFile = ../../../../secrets.yaml;
+      sopsFile = ../../../../common/secrets.yaml;
       owner = "gabriel";
     };
   };