feat: initial m3ta-home structure

- flake.nix with nixpkgs, home-manager, nix-colors, m3ta-nixpkgs, agenix, NUR inputs
- lib/mkHome.nix: compose HM config from user + identity + context + sets
- profiles/base: shell, cli-tools, secrets (always loaded)
- profiles/contexts/desktop: WM, apps, theme, ghostty
- profiles/contexts/server: minimal headless
- profiles/sets/coding: core (git, direnv, jq, rg), editor, lsp, languages, agents
- profiles/sets/gaming: steam, gamescope, gpu
- profiles/sets/media: obs, ffmpeg, kdenlive, handbrake, yt-dlp
- users/m3tam3re/identities: private.nix, work.nix (git, jj, ssh per identity)
- users/m3tam3re/preferences: cliphist, difftastic, base packages

profiles/base/cli-tools/packages.nix

@@ -0,0 +1,62 @@
+# Essential CLI packages — core utilities always available on every host.
+# NOTE: `lazylib` does not exist in nixpkgs. `lazygit` is the correct package
+# (Git TUI) and is intentionally used here instead.
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+with lib; let
+  cfg = config.base.cliTools.essentials;
+in {
+  # Enabled by default — base modules are always-on.
+  options.base.cliTools.essentials.enable = (mkEnableOption "enable essential CLI packages") // {default = true;};
+
+  config = mkIf cfg.enable {
+    home.packages = with pkgs; [
+      # Core utilities
+      coreutils
+      fd
+      htop
+      jq
+      ripgrep
+
+      # Nix
+      alejandra
+      comma
+      nixd
+      nix-diff
+      nix-index
+      nix-update
+
+      # Dev tools
+      bc
+      cmake
+      devenv
+      gcc
+      gnumake
+      go
+      httpie
+      just
+      lazygit
+      progress
+      sqlite
+      sqlite-vec
+      tldr
+
+      # AI tools
+      fabric-ai
+      llm
+
+      # Misc
+      basecamp
+      hyprpaper-random
+      libnotify
+      trash-cli
+      unzip
+      yazi
+      zip
+    ];
+  };
+}