refactor: standardize file-level comments, drop unused pkgs, and theme lazygit with base16

- Move inline comments to top of file across all modules for consistent
style
- Add descriptive comments to files missing them (aggregators,
assertions, scripts, flake)
- Remove unused `pkgs` parameter from i3/keybindings.nix and
zathura/default.nix
- Drop explicit `package = pkgs.zathura` (home-manager provides the
default)
- Delete stale meli-sync.sh (migrated to neomutt)
- Remove extraneous blank lines for consistent formatting
- Theme lazygit with config.scheme base16 colors instead of hardcoded
names

7 files changed, 6 insertions, 10 deletions

diff --git a/modules/security/default.nix b/modules/security/default.nix
index e9d7208..3803897 100644
--- a/modules/security/default.nix
+++ b/modules/security/default.nix
@@ -1,3 +1,4 @@
+# Security - Security tools (enteauth, gopass, gpg, openvpn, ssh)
 { ... }:
 
 {
diff --git a/modules/security/enteauth/default.nix b/modules/security/enteauth/default.nix
index 376451a..064f697 100644
--- a/modules/security/enteauth/default.nix
+++ b/modules/security/enteauth/default.nix
@@ -1,11 +1,10 @@
+# Ente Auth - end-to-end encrypted authentication (2FA)
 {
   config,
   lib,
   pkgs,
   ...
 }:
-
-# Ente Auth - end-to-end encrypted authentication (2FA)
 let
   enteAuthWithKeyring = pkgs.symlinkJoin {
     name = "ente-auth-wrapped";
diff --git a/modules/security/gopass/default.nix b/modules/security/gopass/default.nix
index f5a037f..19191ff 100644
--- a/modules/security/gopass/default.nix
+++ b/modules/security/gopass/default.nix
@@ -5,7 +5,6 @@
   pkgs,
   ...
 }:
-
 {
   options.security.gopass = {
     enable = lib.mkEnableOption "Enables gopass.";
diff --git a/modules/security/gpg/default.nix b/modules/security/gpg/default.nix
index 9ed3868..01deab6 100644
--- a/modules/security/gpg/default.nix
+++ b/modules/security/gpg/default.nix
@@ -1,11 +1,10 @@
+# gpg - GNU Privacy Guard
 {
   config,
   lib,
   pkgs,
   ...
 }:
-
-# gpg - GNU Privacy Guard
 {
   options.security.gpg = {
     enable = lib.mkEnableOption "Enables gpg.";
diff --git a/modules/security/openvpn/default.nix b/modules/security/openvpn/default.nix
index 1636081..58e53cf 100644
--- a/modules/security/openvpn/default.nix
+++ b/modules/security/openvpn/default.nix
@@ -1,11 +1,10 @@
+# OpenVPN - Open-source VPN client for secure remote access
 {
   config,
   lib,
   pkgs,
   ...
 }:
-
-# OpenVPN - Open-source VPN client for secure remote access
 {
   options.security.openvpn = {
     enable = lib.mkEnableOption "Enables openvpn.";
diff --git a/modules/security/ssh/default.nix b/modules/security/ssh/default.nix
index 2224f98..ff684b4 100644
--- a/modules/security/ssh/default.nix
+++ b/modules/security/ssh/default.nix
@@ -1,11 +1,10 @@
+# OpenSSH - Secure shell (SSH) client for encrypted remote connections
 {
   config,
   lib,
   pkgs,
   ...
 }:
-
-# OpenSSH - Secure shell (SSH) client for encrypted remote connections
 {
   imports = [ ./git.nix ];
 
diff --git a/modules/security/ssh/git.nix b/modules/security/ssh/git.nix
index 2c79d34..88bd713 100644
--- a/modules/security/ssh/git.nix
+++ b/modules/security/ssh/git.nix
@@ -1,5 +1,5 @@
+# Git - SSH host configurations for git platforms (github, gitlab, bitbucket, codeberg, sr.ht)
 { config, lib, ... }:
-
 let
   hosts = [
     {