fix(theoden): pin atticd database user — restore binary cache (#285) ## What broke Comin deployed nixpkgs `20260612 -> 20260829` (gen 9, 09f895f0) at 2026-09-04 10:10 CDT. The rebuilt `attic` now resolves its DB username to `anonymous` (newer sqlx/whoami cannot resolve the username under `DynamicUser`+`PrivateUsers`), and Postgres peer auth rejects it: ``` Error: Database error: Connection Error: error returned from database: Peer authentication failed for user "anonymous" ``` `atticd` has been crash-looping since; the binary cache at `theoden.lan:8080` is unreachable (260+ restarts). ## Fix Pin `user=atticd` in the database URL. One line. ## Verification Ran the NEW attic binary on theoden via `systemd-run` with `DynamicUser=yes`, `User=atticd`, `PrivateUsers=yes` and the fixed URL: ``` Running migrations... Starting API server... Listening on [::]:8080... ``` Merges → comin deploys → cache restored. Co-authored-by: Ammar Nanjiani <ammar.nanjiani@gmail.com> Reviewed-on: https://codeberg.org/ananjiani/infra/pulls/285