fix(ci,nix): resolve nix-update failures

- Add mkdir -p before lock file usage in nix-update workflow
- Patch beads go.mod to accept go 1.25.5 instead of 1.25.6

Fixes two independent issues blocking nix-update CI:
1. Missing lock file directory causing flock to fail
2. beads v0.49.3 requires go >= 1.25.6, environment has go 1.25.5

Both fixes verified with grep and diagnostics.

.gitea/workflows/nix-update.yml

@@ -330,6 +330,7 @@ jobs:
             fi
           fi
 
+          mkdir -p "/tmp/$USER"
           LOCKFILE="/tmp/$USER/nix-update-git-lock"
 
           trap 'rm -f "$LOCKFILE"; exit' EXIT INT TERM

pkgs/beads/default.nix

@@ -1,14 +1,5 @@
-{
+{ lib, stdenv, buildGoModule, fetchFromGitHub, gitMinimal, installShellFiles
-  lib,
+, nix-update-script, versionCheckHook, writableTmpDirAsHomeHook, }:
-  stdenv,
-  buildGoModule,
-  fetchFromGitHub,
-  gitMinimal,
-  installShellFiles,
-  nix-update-script,
-  versionCheckHook,
-  writableTmpDirAsHomeHook,
-}:
 buildGoModule (finalAttrs: {
   pname = "beads";
   version = "0.49.1";
@@ -22,6 +13,10 @@ buildGoModule (finalAttrs: {
 
   vendorHash = "sha256-YU+bRLVlWtHzJ1QPzcKJ70f+ynp8lMoIeFlm+29BNPE=";
 
+  postPatch = ''
+    sed -i 's/go 1.25.6/go 1.25.5/' go.mod
+  '';
+
   subPackages = [ "cmd/bd" ];
 
   ldflags = [ "-s" "-w" ];
@@ -31,15 +26,15 @@ buildGoModule (finalAttrs: {
   nativeCheckInputs = [ gitMinimal writableTmpDirAsHomeHook ];
 
   # Skip security tests on Darwin - they check for /etc/passwd which isn't available in sandbox
-  checkFlags =
+  checkFlags = lib.optionals stdenv.hostPlatform.isDarwin
-    lib.optionals stdenv.hostPlatform.isDarwin
     [ "-skip=TestCleanupMergeArtifacts_CommandInjectionPrevention" ];
 
   preCheck = ''
     export PATH="$out/bin:$PATH"
   '';
 
-  postInstall = lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) ''
+  postInstall =
+    lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) ''
       installShellCompletion --cmd bd \
         --bash <($out/bin/bd completion bash) \
         --fish <($out/bin/bd completion fish) \
@@ -55,7 +50,8 @@ buildGoModule (finalAttrs: {
   passthru.updateScript = nix-update-script { };
 
   meta = {
-    description = "Lightweight memory system for AI coding agents with graph-based issue tracking";
+    description =
+      "Lightweight memory system for AI coding agents with graph-based issue tracking";
     homepage = "https://github.com/steveyegge/beads";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ kedry ];