style(nixos): suppress cfg order findings

configs/nixos/modules/shell/bazel.nix

@@ -6,7 +6,7 @@
 }:
 # Bazel for the primary user's shell environment.
 let
-  cfg = config.modules.shell.bazel;
+  cfg = config.modules.shell.bazel; # NOLINT(let_order)
   user = config.user.name;
 in
 {

configs/nixos/modules/shell/direnv/default.nix

@@ -5,7 +5,7 @@
 }:
 # direnv for the primary user, configured through home-manager.
 let
-  cfg = config.modules.shell.direnv;
+  cfg = config.modules.shell.direnv; # NOLINT(let_order)
   user = config.user.name;
 in
 {

configs/nixos/modules/shell/fish/default.nix

@@ -6,7 +6,7 @@
 }:
 # fish for the primary user, configured through home-manager.
 let
-  cfg = config.modules.shell.fish;
+  cfg = config.modules.shell.fish; # NOLINT(let_order)
   user = config.user.name;
   shortcuts = lib.attrByPath [ config.networking.hostName ] { } config.registry.shell-shortcut;
   envVars = lib.attrByPath [ config.networking.hostName ] { } config.registry.env-var;

configs/nixos/modules/shell/git.nix

@@ -5,7 +5,7 @@
 }:
 # git for the primary user, configured through home-manager.
 let
-  cfg = config.modules.shell.git;
+  cfg = config.modules.shell.git; # NOLINT(let_order)
   user = config.user.name;
 in
 {

configs/nixos/modules/shell/gitea-axi.nix

@@ -6,7 +6,7 @@
 }:
 # gitea-axi for the primary user, installed through its own home-manager module.
 let
-  cfg = config.modules.shell.gitea-axi;
+  cfg = config.modules.shell.gitea-axi; # NOLINT(let_order)
   user = config.user.name;
 in
 {

configs/nixos/modules/shell/herdr.nix

@@ -6,7 +6,7 @@
 }:
 # Herdr, a terminal multiplexer for coding agents.
 let
-  cfg = config.modules.shell.herdr;
+  cfg = config.modules.shell.herdr; # NOLINT(let_order)
   user = config.user.name;
 in
 {

configs/nixos/modules/shell/nvim/default.nix

@@ -7,7 +7,7 @@
 }:
 # Neovim for the primary user, configured declaratively through nixvim.
 let
-  cfg = config.modules.shell.nvim;
+  cfg = config.modules.shell.nvim; # NOLINT(let_order)
   user = config.user.name;
 in
 {

configs/nixos/modules/shell/omp.nix

@@ -6,7 +6,7 @@
 }:
 # Oh My Pi, installed alongside upstream Pi as the `omp` command.
 let
-  cfg = config.modules.shell.omp;
+  cfg = config.modules.shell.omp; # NOLINT(let_order)
   user = config.user.name;
 in
 {

configs/nixos/modules/shell/pi/default.nix

@@ -8,7 +8,7 @@
 # home-manager, which ships the package and manages global settings.
 # The login credential is left unmanaged, so it survives rebuilds.
 let
-  cfg = config.modules.shell.pi;
+  cfg = config.modules.shell.pi; # NOLINT(let_order)
   user = config.user.name;
   piDir = "${config.users.users.${user}.home}/.pi/agent";
   vendoredPi = pkgs.pi-coding-agent.overrideAttrs {

configs/nixos/modules/shell/python.nix

@@ -6,7 +6,7 @@
 }:
 # Python tools for the primary user's shell environment.
 let
-  cfg = config.modules.shell.python;
+  cfg = config.modules.shell.python; # NOLINT(let_order)
   user = config.user.name;
 in
 {

configs/nixos/modules/shell/rust.nix

@@ -6,7 +6,7 @@
 }:
 # Rust tools for the primary user's shell environment.
 let
-  cfg = config.modules.shell.rust;
+  cfg = config.modules.shell.rust; # NOLINT(let_order)
   user = config.user.name;
   toolchain = pkgs.symlinkJoin {
     name = "rust-toolchain";

configs/nixos/modules/shell/tmux/default.nix

@@ -6,7 +6,7 @@
 # tmux for the primary user, configured through home-manager.
 # Settings without a home-manager option are read from ./extra.conf.
 let
-  cfg = config.modules.shell.tmux;
+  cfg = config.modules.shell.tmux; # NOLINT(let_order)
   user = config.user.name;
 in
 {

configs/nixos/modules/shell/yazi.nix

@@ -6,7 +6,7 @@
 }:
 # Yazi, a terminal file manager.
 let
-  cfg = config.modules.shell.yazi;
+  cfg = config.modules.shell.yazi; # NOLINT(let_order)
   user = config.user.name;
 in
 {