refactor(nix): order let bindings

configs/nixos/modules/desktop/apps/firefox.nix

@@ -8,8 +8,8 @@
 # Firefox as the desktop browser: stock mainline, hardened and de-monetized by policy.
 let
   cfg = config.modules.desktop.apps.firefox; # NOLINT(let_order)
-  user = config.user.name;
   firefoxAddons = inputs.firefox-addons.packages.${pkgs.stdenv.hostPlatform.system};
+  user = config.user.name;
 in
 {
   options.modules.desktop.apps.firefox = {

configs/nixos/modules/desktop/session/hyprland/default.nix

@@ -7,7 +7,6 @@
 # The Hyprland compositor.
 let
   cfg = config.modules.desktop.session.hyprland; # NOLINT(let_order)
-  user = config.user.name;
   cursor = config.stylix.cursor;
 
   # Numbered-workspace switch and move for 1..9, the operator's i3 muscle memory.
@@ -18,6 +17,7 @@ let
 
   # Flip the tiling strategy between the two built-in layouts, since neither a
   # dispatcher nor a keyword toggles it on its own.
+  user = config.user.name;
   toggleLayout = pkgs.writeShellScript "hypr-toggle-layout" ''
     if [ "$(hyprctl getoption -j general:layout | ${pkgs.jq}/bin/jq -r .str)" = dwindle ]; then
       hyprctl keyword general:layout master

configs/nixos/modules/desktop/session/hyprland/hypridle.nix

@@ -7,6 +7,7 @@
 # hypridle: idle-triggered locking and display power management.
 let
   cfg = config.modules.desktop.session.hyprland.hypridle; # NOLINT(let_order)
+  lockCmd = "${pkgs.procps}/bin/pidof hyprlock || ${hyprlock}";
   user = config.user.name;
 
   hyprctl = "${config.programs.hyprland.package}/bin/hyprctl";
@@ -14,7 +15,6 @@ let
 
   # The guard drops the call when a locker is already up, so no idle trigger
   # stacks a second hyprlock over the first.
-  lockCmd = "${pkgs.procps}/bin/pidof hyprlock || ${hyprlock}";
 in
 {
   options.modules.desktop.session.hyprland.hypridle = {

configs/nixos/modules/desktop/session/waybar.nix

@@ -8,11 +8,11 @@
 let
   cfg = config.modules.desktop.session.waybar; # NOLINT(let_order)
   vpnClient = config.modules.network.vpn-client;
+  g = code: builtins.fromJSON ''"\u${code}"'';
   user = config.user.name;
 
   # A Nerd Font Private-Use-Area codepoint as a literal character, decoded
   # through JSON so the glyph survives as bytes rather than an editor paste.
-  g = code: builtins.fromJSON ''"\u${code}"'';
   sleepOffIcon = builtins.fromJSON ''"\udb81\udcb3"'';
 
   # Renders and toggles mako's do-not-disturb mode.

configs/nixos/modules/desktop/utilities/theming.nix

@@ -7,15 +7,15 @@
 # Nord theming for the graphical layer, driven from one base16 scheme by Stylix.
 let
   cfg = config.modules.desktop.utilities.theming; # NOLINT(let_order)
-  user = config.user.name;
-
-  # A single static Nord wallpaper, drawn as a vertical gradient across the
-  # Polar Night shades so it needs no committed binary and no network fetch.
   wallpaper = pkgs.runCommand "nord-wallpaper.png" { } ''
     ${pkgs.imagemagick}/bin/magick \
       -size 2560x1440 gradient:'#2E3440'-'#3B4252' \
       "$out"
   '';
+  user = config.user.name;
+
+  # A single static Nord wallpaper, drawn as a vertical gradient across the
+  # Polar Night shades so it needs no committed binary and no network fetch.
 in
 {
   options.modules.desktop.utilities.theming.enable =