refactor(nix): extract common system configs into reusable modules

Create 6 new NixOS modules to reduce duplication across system configs:
- hardware/wooting: Wooting keyboard udev rules and Bluetooth compat
- services/nginx-base: Common nginx server settings
- services/acme-base: ACME certificate defaults
- services/xremap: Key remapping with sensible defaults
- system/no-sleep: Disable sleep/suspend/hibernate targets
- system/kernel-tweaks: PM freeze timeout and zram configuration

Update system configuration files to use these new modules.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

systems/x86_64-linux/nixtee1/default.nix

@@ -6,8 +6,6 @@
 {
   imports = [ ./hardware-configuration.nix ];
 
-  services.tailscale.enable = true;
-
   boot.kernelPackages = lib.mkOverride 0 pkgs.linuxPackages_latest;
   boot.loader.systemd-boot.enable = false;
   # Bootloader.
@@ -18,6 +16,8 @@
   security.tpm2.enable = false;
   security.tpm2.abrmd.enable = false;
 
+  services.tailscale.enable = true;
+
   metacfg = {
     base.enable = true;
     nix-ld.enable = true;
@@ -37,12 +37,6 @@
     podman.dockerCompat = false;
   };
 
-  system.autoUpgrade = {
-    enable = true;
-    operation = "switch";
-    allowReboot = true;
-  };
-
   networking.wireless.enable = false; # Enables wireless support via wpa_supplicant.
 
   networking.firewall.allowPing = true;
@@ -66,5 +60,11 @@
     }
   ];
 
+  system.autoUpgrade = {
+    enable = true;
+    operation = "switch";
+    allowReboot = true;
+  };
+
   system.stateVersion = "25.05";
 }