fix: Orb mini Configuration for github-runner and jenkins-runners and flashing rig

[chrisgalanis]

.

[github-actions]

No concrete correctness, security, or merge-blocking issues found in the PR changes.

[github-actions]

• Blocker: configuration.nix:17 and the equivalent SF config import ../orb-mini-runner.nix, but that file does not exist in the PR tree. Both NixOS configurations will fail to evaluate, preventing deployment. Please add the module or correct/remove the imports.

[github-actions]

No concrete correctness, security, or regression issues found in the PR changes. The shared Orb Mini configuration and runner environments appear internally consistent.

[github-actions]

No concrete correctness, security, or merge-blocking issues found in the PR changes.

[github-actions]

• nix/machines/orb-mini-runner.nix:10: The flashing-rig service uses an isolated Python containing only kivy and pyudev. boto3, declared for Mini runners below, is unavailable to this interpreter, so any flashing-rig AWS/S3 path will fail with ModuleNotFoundError. Include boto3 in flashingRigPython (or reuse the complete package set).

[github-actions]

• [P1] nix/machines/orb-mini-runner.nix:82 — flashing-rig service depends on an unprovisioned checkout. Nothing in this PR creates %h/orb-mini-utils/flashing-rig. On a fresh deployment, systemd fails before ExecStart because WorkingDirectory is absent, then loops every five seconds. Provision the source declaratively or make the path configurable and ensure deployment creates it.

[github-actions]

• nix/machines/orb-mini-runner.nix:78-80 — The flashing-rig unit creates an ordering cycle. WantedBy=graphical-session.target makes the target want and order itself after the service, while the service declares After=graphical-session.target. systemd may drop the service job when resolving this cycle. Remove the After/Wants pair or order it after graphical-session-pre.target instead.

[sfikastheo]

Wont just doing this

users.users.${agentUser} = {
  isNormalUser = true;
  home = "/home/jenkins-agent";
  createHome = true;
  extraGroups = [ "wheel" ] ++ cfg.extraGroups;
};

IN the user creation solve this? Do you want tmp on home?
What is going to be there?

[github-actions]

• [P1] Flashing-rig service creates a systemd ordering cycle — nix/machines/orb-mini-runner.nix:78

  wantedBy = [ "graphical-session.target" ] makes the target want and order itself after this service, while after = [ "graphical-session.target" ] orders the service after the target. Systemd must break this cycle, potentially preventing the service from starting. Remove the after/wants relationship to graphical-session.target (or order after graphical-session-pre.target).

[github-actions]

• [P1] Flashing-rig Python omits boto3 — nix/machines/orb-mini-runner.nix:10

  The service runs the isolated flashingRigPython, containing only kivy and pyudev. Although boto3 is added to worldcoin.extraPythonPackages, that affects runner environments, not this interpreter. Any flashing-rig S3 operations will fail with ModuleNotFoundError. Include boto3 in flashingRigPython or build both environments from one package list.