A 4-host NixOS fleet with multi-agent worktree guards
One flake, four heterogeneous hosts (x86_64-linux + aarch64-darwin + steam-deck + a CI macbook), and a worktree-first git rule that lets multiple Claude Code agents share the same repository without colliding. Hostname-whitelisted push guards catch misrouted commits before they reach origin.