feat(nixos): add gws and fix switch blockers

nixos/code.nix

@@ -17,6 +17,7 @@ makeEnable config "myModules.code" true {
     # MCP
     github-mcp-server
     gitea-mcp-server
+    gws
     playwright-mcp
     playwright-cli
 

nixos/essential.nix

@@ -48,7 +48,7 @@ in
     magic-wormhole-rs
     mesa-demos
     ncdu
-    neofetch
+    fastfetch
     neovim
     nix-index
     nix-search-cli

nixos/flake.nix

@@ -228,6 +228,11 @@
         pr = 492656;
         hash = "sha256-0TGZ12iIfSYs6cs5kgWDAyiThJdlLMhqRGUscVQv5hU=";
       }
+      # gws
+      {
+        pr = 496806;
+        hash = "sha256-D5g3B2RigdHXeTybATeJqRssQsgCfGF/5zTg4zQb7+g=";
+      }
       # claude-code
       # {
       #   pr = 464698;

nixos/machines/strixi-minaj.nix

@@ -49,6 +49,10 @@
   programs.virt-manager.enable = true;
   virtualisation.libvirtd.enable = true;
   virtualisation.spiceUSBRedirection.enable = true;
+  systemd.services.virt-secret-init-encryption.serviceConfig.ExecStart = lib.mkForce [
+    ""
+    "${pkgs.runtimeShell} -c 'umask 0077 && (dd if=/dev/random status=none bs=32 count=1 | systemd-creds encrypt --name=secrets-encryption-key - /var/lib/libvirt/secrets/secrets-encryption-key)'"
+  ];
 
   services.xserver.dpi = 96;
   # linuxPackages_latest (6.19) currently fails to build nvidia-open.