caesium: thunderbird and vscode updates

cleo.darwin.nix

@@ -1,12 +1,15 @@
-{ pkgs, lib, inputs, ... }:
+{ pkgs
+, lib
+, ...
+}:
 let
   ansibleRequired = {
     taps = [
       "fwdcloudsec/granted" # aws sso utility
-      "felipeelias/tap"     # claude-statusline
-      "f1bonacc1/tap"       # process-compose
-      "oven-sh/bun"         # bun
-      "sst/tap"             # opencode
+      "felipeelias/tap" # claude-statusline
+      "f1bonacc1/tap" # process-compose
+      "oven-sh/bun" # bun
+      "sst/tap" # opencode
     ];
     brews = [
       "allure"
@@ -26,7 +29,7 @@ let
       "snyk-cli"
       "sst/tap/opencode"
       "ldcli"
-      
+
       ## Excluded intentionally
       # "libpq@17"
       # "node@22"
@@ -35,7 +38,7 @@ let
       "1password-cli"
       "aws-vpn-client"
       "chromedriver"
-      "claude-code"       # stable channel; playbook can opt into claude-code@latest
+      "claude-code" # stable channel; playbook can opt into claude-code@latest
       "copilot-cli"
       "docker-desktop"
       "expo-orbit"
@@ -47,7 +50,8 @@ let
       # "jetbrains-toolbox"
     ];
   };
-in {
+in
+{
   ids.gids.nixbld = 350;
   security.pam.services.sudo_local.touchIdAuth = true;
 
@@ -74,7 +78,11 @@ in {
   ];
 
   # Add Homebrew to PATH
-  environment.systemPath = [ "/opt/homebrew/bin" "/opt/homebrew/sbin" "/Users/matthew.bessette/.local/bin" ];
+  environment.systemPath = [
+    "/opt/homebrew/bin"
+    "/opt/homebrew/sbin"
+    "/Users/matthew.bessette/.local/bin"
+  ];
 
   system.primaryUser = "matthew.bessette";
   users.users."matthew.bessette" = {
@@ -83,8 +91,8 @@ in {
   };
 
   # Homebrew for Casks and specific binaries
-  # In a nix-darwin setup, Homebrew packages are not actually stored inside the Nix store. 
-  # Instead, nix-darwin acts as a manager that triggers the standard Homebrew installation 
+  # In a nix-darwin setup, Homebrew packages are not actually stored inside the Nix store.
+  # Instead, nix-darwin acts as a manager that triggers the standard Homebrew installation
   # process on your macOS system.
   homebrew = {
     enable = true;
@@ -95,33 +103,42 @@ in {
     # Each list is (ansible-managed set) ++ (nix-only extras), deduped. With
     # cleanup = "uninstall" above, anything NOT listed here gets removed on
     # activation — so ansibleRequired must be merged in or nix would clobber it.
-    taps = lib.unique (ansibleRequired.taps ++ [
-      # nix-only taps go here
-    ]);
-    brews = lib.unique (ansibleRequired.brews ++ [
-      "biome"
-      "jira-cli"
-      "treehouse"
-    ]);
+    taps = lib.unique (
+      ansibleRequired.taps
+      ++ [
+        # nix-only taps go here
+      ]
+    );
+    brews = lib.unique (
+      ansibleRequired.brews
+      ++ [
+        "biome"
+        "jira-cli"
+        "treehouse"
+      ]
+    );
     # visual-studio-code is installed by Homebrew (in ansibleRequired.casks) so
     # Homebrew owns the .app; home-manager (cleo.home.nix) owns settings +
     # extensions only (programs.vscode with package = null) — no second copy.
-    casks = lib.unique (ansibleRequired.casks ++ [
-      "android-commandlinetools"
-      "android-platform-tools"
-      "bruno"
-      "claude"
-      "figma"
-      "super-productivity"
-      "kopiaui"
-      "libreoffice"
-      "obsidian"
-      "postico"
-      "sublime-text"
-      "spotify"
-      "yubico-yubikey-manager"
-      "zoom"
-    ]);
+    casks = lib.unique (
+      ansibleRequired.casks
+      ++ [
+        "android-commandlinetools"
+        "android-platform-tools"
+        "bruno"
+        "claude"
+        "figma"
+        "super-productivity"
+        "kopiaui"
+        "libreoffice"
+        "obsidian"
+        "postico"
+        "sublime-text"
+        "spotify"
+        "yubico-yubikey-manager"
+        "zoom"
+      ]
+    );
 
     masApps = {
       BetterSnapTool = 417375580;