5591dc09

By: ananjiani <ananjiani@noreply.codeberg.org>

test(theoden): NixCI cache and Comin gate bootstrap (#303)

Temporary Theoden-only test of PR #296. Do not merge this into main.

- Base testing-theoden starts at current main d5dfac4ee71e8c93c00c182afa31054414681dfc.
- Theoden is healthy and Comin is paused while this test is prepared.
- Recovery access is checked: direct SSH to root@rohan.lan works; Theoden is VM 104 and the guest agent responds.
- Require buildbot/nix-build success on the exact head, then use fast-forward-only merge into testing-theoden.
- Resume Comin for temporary operation=test. This first deployment installs the manual gate; a second small configuration change will exercise it.
- Check services, authenticated NixCI access, gate timer, exporter metrics, and Attic filter after activation. No full-closure guarantee; Nix may rebuild missing dependencies and their cached parents.
- Baseline Attic filter is [cache.nixos.org-1]. The test changes server-side filter state; a reboot alone does not undo that database change.

No wider rollout until the test passes. Main remains unchanged.

Co-authored-by: Ammar Nanjiani <ammar.nanjiani@gmail.com>
Reviewed-on: https://codeberg.org/ananjiani/infra/pulls/303