feat(adguard): route the tailnet through adguard and advertise an exit node
- modules/system-level/security/adguard/adguard.nix: new. adguardhome on :53 across localhost and both tailscale addresses, ui on :3000, upstream 127.0.0.1:5300, ratelimit 0, 168h logs, a "+" ExecStartPre of tailscale wait, state into /persist
- modules/system-level/security/adguard/filters.json: new. adguard dns, hagezi pro, smart-tv, urlhaus and phishtank blocklists
- modules/system-level/security/dnscrypt.nix: move listen_addresses to :5300, set block_ipv6 to false
- modules/system-level/net.nix: set useRoutingFeatures to server, add --advertise-exit-node to extraSetFlags
- modules/user-level/nushell/config.nu: add block-s, pulling the adguard filter list into filters.json over the api
feat(eve): add pyfa, evelens and a read-only ESI module
- nvfetcher.toml: add evelens on the aliacollins/EveLens tag
- _sources/generated.{nix,json}: regenerate, adding evelens v1.5.2
- modules/user-level/gaming/eve/eve.nix: new. pyfa, evelens via wrapType2 with icu, eve.nu out to ~/.config/nushell, .config/EveLens and .pyfa onto /persist
- modules/user-level/gaming/eve/eve.nu: new. read-only ESI module. eve sys, route, quiet, hotspots, fw
- modules/system-level/options.nix: add mySystem.nushell.extraConfig
- modules/user-level/nushell/nushell.nix: build config.nu from readFile plus extraConfig
- .tack/pins.lock.json: bump concord, nix-cachyos-kernel, nix-index-database, nixpkgs, noctalia and umbriel