Add most-used dev tools, sshd/firewall, bash+liquidprompt shell

modules/home/dev-tools.nix provisions the developer's evidenced most-
used CLI/client tooling (gh, tmux, htop, yq-go, tree-sitter, docker,
docker-compose, kubectl, awscli2). modules/home/shell.nix drops zsh/
starship/direnv in favor of bash + liquidprompt, both left entirely to
the user's own dotfiles for config since home-manager can't own
~/.bashrc without conflicting with it. modules/nixos/common.nix adds
sshd (key-only auth) and a firewall baseline for future NixOS hosts.

3 files changed, 17 insertions, 12 deletions

diff --git a/modules/home/default.nix b/modules/home/default.nix
index ec32c7f..89bad9e 100644
--- a/modules/home/default.nix
+++ b/modules/home/default.nix
@@ -4,5 +4,6 @@
     ./editor.nix
     ./cli-tools.nix
     ./dotfiles.nix
+    ./dev-tools.nix
   ];
 }
diff --git a/modules/home/dev-tools.nix b/modules/home/dev-tools.nix
new file mode 100644
index 0000000..f98790e
--- /dev/null
+++ b/modules/home/dev-tools.nix
@@ -0,0 +1,14 @@
+{ pkgs, ... }:
+{
+  home.packages = with pkgs; [
+    gh
+    tmux
+    htop
+    yq-go
+    tree-sitter
+    docker
+    docker-compose
+    kubectl
+    awscli2
+  ];
+}
diff --git a/modules/home/shell.nix b/modules/home/shell.nix
index 406206c..7e6dc85 100644
--- a/modules/home/shell.nix
+++ b/modules/home/shell.nix
@@ -1,14 +1,4 @@
+{ pkgs, ... }:
 {
-  programs.zsh = {
-    enable = true;
-    autosuggestion.enable = true;
-    syntaxHighlighting.enable = true;
-  };
-
-  programs.starship.enable = true;
-
-  programs.direnv = {
-    enable = true;
-    nix-direnv.enable = true;
-  };
+  home.packages = [ pkgs.liquidprompt ];
 }