58754e4e

fix(theoden): pin atticd database user — restore binary cache (#285)

## What broke

Comin deployed nixpkgs `20260612 -> 20260829` (gen 9, 09f895f0) at 2026-09-04 10:10 CDT. The rebuilt `attic` now resolves its DB username to `anonymous` (newer sqlx/whoami cannot resolve the username under `DynamicUser`+`PrivateUsers`), and Postgres peer auth rejects it:

```
Error: Database error: Connection Error: error returned from database:
Peer authentication failed for user "anonymous"
```

`atticd` has been crash-looping since; the binary cache at `theoden.lan:8080` is unreachable (260+ restarts).

## Fix

Pin `user=atticd` in the database URL. One line.

## Verification

Ran the NEW attic binary on theoden via `systemd-run` with `DynamicUser=yes`, `User=atticd`, `PrivateUsers=yes` and the fixed URL:

```
Running migrations...
Starting API server...
Listening on [::]:8080...
```

Merges → comin deploys → cache restored.

Co-authored-by: Ammar Nanjiani <ammar.nanjiani@gmail.com>
Reviewed-on: https://codeberg.org/ananjiani/infra/pulls/285

Total

1h45m58s

Time to Start Worker time Duration Time to finish Idle
Config 5s 11s 11s 16s 5s
Eval 18s 9m51s 9m51s 10m09s 1s
Build 10m08s 4h08m21s 1h35m55s 1h46m03s 22m51s
Suite 5s 4h18m23s 1h45m58s 1h46m03s 22m58s

Timeline

Config Eval Build Compressed gap
0s1m2m3m4m5m6m7m8m9m10m33m34m35m36m37m38m39m40m41m42m43m44m45m46m47m48m49m50m51m52m53m54m55m56m57m58m59m1h0m1h1m1h2m1h3m1h4m1h5m1h6m1h7m1h8m1h9m1h10m1h11m1h12m1h13m1h14m1h15m1h16m1h17m1h18m1h19m1h20m1h21m1h22m1h23m1h24m1h25m1h26m1h27m1h28m1h29m1h30m1h31m1h32m1h33m1h34m1h35m1h36m1h37m1h38m1h39m1h40m1h41m1h42m1h43m1h44m1h45m1h46m