feat(chromium): use ouch, drop python dep, add assertion; add private configs

- Replace unzip with ouch from file-management.ouch.package
- Replace python3-based CRX header parsing with pure shell (od)
- Add assertion that file-management.ouch is enabled when chromium is
- Thread config through to extension lib
- Add bookmark_bar.show_on_all_tabs = false to chromium prefs
- Add private modules: cloudflare-warp wireguard, email, git config

1 files changed, 12 insertions, 0 deletions

diff --git a/modules/web/chromium/extensions/assertions.nix b/modules/web/chromium/extensions/assertions.nix
new file mode 100644
index 0000000..52a0081
--- /dev/null
+++ b/modules/web/chromium/extensions/assertions.nix
@@ -0,0 +1,12 @@
+{ config, ... }:
+{
+  assertions = [
+    {
+      assertion = !config.web.chromium.enable || config.file-management.ouch.enable;
+      message = ''
+        web.chromium.enable is true but file-management.ouch.enable is not.
+        chromium extension fetching requires ouch to decompress extension archives. Please enable file-management.ouch.
+      '';
+    }
+  ];
+}