refactor(flake): split assembly by concept

guests/actualbudget.nix

@@ -10,7 +10,7 @@ let
 in
 {
   imports = [
-    (dotfiles.guest {
+    (dotfiles.mkGuest {
       name = "actualbudget";
       interior = {
         modules.services.actualbudget = {

guests/copyparty.nix

@@ -35,7 +35,7 @@ let
 in
 {
   imports = [
-    (dotfiles.guest {
+    (dotfiles.mkGuest {
       name = "copyparty";
       interior = {
         modules.services.copyparty = {

guests/nesting-sample.nix

@@ -1,7 +1,7 @@
 args@{ dotfiles, ... }:
 # A sample guest whose interior runs an OCI container on Podman.
 # The image is pulled at runtime, so the guest builds with no build-time fetch.
-dotfiles.guest {
+dotfiles.mkGuest {
   name = "nesting-sample";
   interior = {
     virtualisation.oci-containers.containers.hello = {

guests/reverse-proxy.nix

@@ -9,7 +9,7 @@ let
 in
 {
   imports = [
-    (dotfiles.guest {
+    (dotfiles.mkGuest {
       name = "reverse-proxy";
       interior = {
         modules.services.reverse-proxy.enable = true;

guests/sample.nix

@@ -2,4 +2,4 @@ args@{ dotfiles, ... }:
 # The tracer-bullet guest: the thinnest complete path from discovery to a
 # running nested container. Its interior is just the guest-base — the baseline
 # toolset and SSH access — so it proves the concept without carrying a service.
-dotfiles.guest { name = "sample"; } args
+dotfiles.mkGuest { name = "sample"; } args