Update Nix configurations and bump flake.lock dependencies

Refine hardware and README LUKS syntax.
Adjust CUPS publish options and remove the Hyprland portal.
Add bubblewrap to Codex packages.
Disable Opencode validation and enable mutable settings.
Remove the unused beads package from extra-packages.
Update flake.lock to newer revisions for all dependencies.

modules/core/printing.nix

@@ -24,15 +24,11 @@
       enable = true;
       nssmdns4 = true;
       openFirewall = true;
-      publish = {
-        enable = true;
-        userServices = true;
+      settings.publish = {
+        disable-publishing = false;
+        disable-user-service-publishing = false;
+        publish-addresses = true;
       };
-      # settings.publish = {
-      #   disable-publishing = false;
-      #   disable-user-service-publishing = false;
-      #   publish-adresses = true;
-      # };
     };
 
     ipp-usb.enable = true;

modules/core/xdg.nix

@@ -3,7 +3,6 @@
     enable = true;
     wlr.enable = true;
     extraPortals = with pkgs; [
-      xdg-desktop-portal-hyprland
       xdg-desktop-portal-gtk
     ];
     configPackages = [pkgs.hyprland];

modules/home/codex/default.nix

@@ -7,8 +7,9 @@
   options.codex.enable = lib.mkEnableOption "Codex";
 
   config = lib.mkIf config.codex.enable {
-    home.packages = [
-      pkgs.nodejs
+    home.packages = with pkgs; [
+      nodejs
+      bubblewrap
     ];
 
     programs.codex = {

modules/home/opencode/default.nix

@@ -9,7 +9,12 @@
   config.programs.opencode = lib.mkIf config.opencode.enable {
     enable = true;
     package = pkgs.opencode;
-    validateFiles.config = true;
+    validateFiles = {
+      config = false;
+      cli = false;
+    };
+    mutableSettings = true;
+    cli = {};
   };
 
   imports = [

modules/home/opencode/extra-packages.nix

@@ -4,7 +4,6 @@
     ruff
     biome
     bun
-    beads
     rust-analyzer
     alejandra
     docker