feat(doas): add sudo wrapper

modules/desktop/terminal/kitty/default.nix

@@ -27,6 +27,7 @@ lib.my.makeHomeProgramConfig {
         name = "monospace";
         size = 14;
       };
+      shellIntegration.mode = "no-cursor no-sudo";
       extraConfig = ''
         include ${./tokyonight-storm.conf}
       '';

modules/user.nix

@@ -35,20 +35,22 @@ lib.my.makeSwitch {
     };
     users.users.root.hashedPasswordFile = lib.mkDefault config.sops.secrets.imxyy-nix-hashed-password.path;
 
+    security.sudo.enable = false;
     security.doas = {
       enable = true;
       extraRules = [
         {
           users = [ username ];
           noPass = true;
+          keepEnv = true;
         }
       ];
     };
     environment.shellAliases = {
-      sudo = "doas";
       sudoedit = "doasedit";
     };
     environment.systemPackages = [
+      (pkgs.writeShellScriptBin "sudo" ''exec doas "$@"'')
       (pkgs.writeShellScriptBin "doasedit" ''
         if [ -n "''${2}" ]; then
           printf 'Expected only one argument\n'