refactor: restructure config files

modules/secrets/sops-password.nix

@@ -0,0 +1,13 @@
+{ config, ... }:
+let
+  account = config.repo.account;
+in
+{
+  flake.modules.nixos.sops-password =
+    { config, ... }:
+    {
+      sops.secrets.hashed-password.neededForUsers = true;
+
+      users.users.${account.name}.hashedPasswordFile = config.sops.secrets.hashed-password.path;
+    };
+}