fix(hosts/wireless): disable Wi-Fi Direct

Its control socket never gets ctrl_interface_group applied (upstream never
copies the field when creating the P2P device), so with the daemon running as
root the socket is root-only. wpa_gui scans the directory, hits p2p-dev-*
first and gives up before reaching the real interface.

Assisted-by: pi (claude-opus-5)

hosts/common/wireless.nix

@@ -12,6 +12,12 @@
     # can't be decrypted kills the daemon (and the control socket needed to
     # connect by hand and fix it). Also breaks wpa_gui.
     enableHardening = false;
+    # The P2P device's control socket never gets ctrl_interface_group applied
+    # (upstream doesn't copy the field when creating that interface), so with
+    # the daemon running as root it ends up root-only. wpa_gui scans the socket
+    # directory, hits p2p-dev-* first and gives up before reaching the real
+    # interface. We don't use Wi-Fi Direct anyway.
+    extraConfig = "p2p_disabled=1";
     # Declarative
     secretsFile = config.sops.secrets.wireless.path;
     networks = {