nix/hosts/cc-ci: real hardware + networking from the box; document the infect fixes

hardware.nix / networking.nix are now the nixos-infect output of
195.201.88.249 (ESP E079-7D41, eth0 MAC-pinned), with the one edit that
matters: defaultGateway as an attrset with interface = "eth0".

README §2a records what it actually took to get NixOS running on the
Debian 13 image: NO_SWAP=true (tmpfs /tmp), a manual lustration from rescue
mode because 26.05's systemd initrd did not honour NIXOS_LUSTRATE (Debian's
unit files shadowed every NixOS service), and the gateway fix applied via a
chroot rebuild with the nix sandbox off.

flake: cc-ci input back on main (PR #32 merged as f6dbfa3); loops uid pinned
to 1000 so workspace rsyncs by uid line up.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FqkQq3CDmFWcQ7u1LzoyRz

nix/modules/orchestrator-host.nix

@@ -51,6 +51,7 @@ in
     # claude sessions run as non-root (--dangerously-skip-permissions is refused for root).
     users.users.loops = {
       isNormalUser = true;
+      uid = 1000;                 # fixed: workspace files are rsynced between hosts by uid
       home = "/home/loops";
       shell = pkgs.bash;
       extraGroups = [ "wheel" "docker" ];