- New module at modules/nixos/services/clamav.nix
- Options: enable (CLI-only), enableDaemon (full services),
onAccessScanning (clamonacc), scanPaths, dailyScanTime
- All scans are logging-only — no auto-quarantine or deletion
- uConsole: CLI tools only (enableDaemon=false)
- lazyworkhorse: full setup with on-access scanning, daily 3 AM scan
Also: remove neovim from uConsole (fails cross-compile, emacs available)
