Merge remote changes + feat: AIO v2 board module

- Cross-compile overlays for Hyprland (libcamera, pipewire, gjs)
- Refactor uconsoleBaseModules into reusable list
- Add wireguard-client service module
- Restructure users into subdirectories
- New: hardware.uconsole-cm5-aio-v2 module (GPIO rails, aiov2_ctl, GPS UART)
- Update configuration.nix with Hyprland + AIO v2
- Add AIO v2 module to both toplevel and SD image config

hosts/uconsole-cm5/configuration.nix

@@ -20,12 +20,32 @@
     users.ai-worker.main
   ];
 
+  # AI worker user (Hermes SSH access)
+  users.users.ai-worker = {
+    isNormalUser = false;
+    shell = pkgs.bash;
+    openssh.authorizedKeys.keys = with keys; [
+      users.ai-worker.main
+    ];
+  };
+
+  # Age secret for gortium password (file created by user)
+  age.secrets.gortium_password = {
+    file = ../secrets/gortium_password.age;
+  };
+
   # WiFi via NetworkManager + secret agenix
   networking.networkmanager.enable = true;
 
   # Firmware
   hardware.enableRedistributableFirmware = true;
 
+  # Hyprland Wayland compositor (manual start — no SDDM)
+  programs.hyprland = {
+    enable = true;
+    xwayland.enable = true;
+  };
+
   # HackerGadgets AIO v2 board
   hardware.uconsole-cm5-aio-v2 = {
     enable = true;