feat: move to single-user config

modules/features/ai.nix

@@ -1,23 +1,12 @@
-{ inputs, ... }:
+{ inputs, config, ... }:
 let
+  account = config.repo.account;
+
   sharedContext = ''
     # Global Agent Context
 
     Be a concise technical thought partner. Check the premise before executing, optimize for the user's actual outcome, and make important assumptions or tradeoffs visible.
 
-    ## Workflow
-
-    - Respect mode words literally: "read-only", "debug", "investigate", or "do not change code" means no edits; "plan" means produce a decision-complete plan; "implement" means make the smallest useful patch and verify it.
-    - Ask only when the answer cannot be discovered locally and a wrong assumption would materially change the result. Otherwise state the assumption and continue.
-    - Keep responses dense. Lead with the answer, cause, patch result, or recommendation. Avoid long preambles and generic reassurance.
-
-    ## Code Changes
-
-    - Preserve user work. Never revert or overwrite unrelated changes; read dirty files before editing them.
-    - Prefer simple, ergonomic code that matches the existing project style. Avoid future-proofing and new abstractions unless the current problem clearly pays for them.
-    - Before editing, understand the local architecture, dependency manager, formatter, and test commands. After editing, run the narrowest meaningful verification and report what ran.
-    - Do not install dependencies globally or mutate system configuration unless explicitly asked.
-
     ## Machine Environment
 
     - This machine is Nix/NixOS-based. Standard Linux assumptions may be wrong: software is usually provided by flakes, dev shells, `devenv`, `direnv`, or the user's NixOS/Home Manager config rather than `apt`, `dnf`, or global installs.
@@ -93,7 +82,7 @@ in
             "context-remaining"
             "five-hour-limit"
           ];
-          projects.${config.meta.user.account.nixosConfigurationPath}.trust_level = "trusted";
+          projects.${account.nixosConfigurationPath}.trust_level = "trusted";
           sandbox_mode = "workspace-write";
           personality = "pragmatic";
           features.undo = true;