feat: v1 release branch — generated flakes and template track ?ref=v1

Installed machines and the downstream template now resolve nomarchy from
git+https://git.bemagri.xyz/bernardo/nomarchy.git?ref=v1 (the lock's
original node carries the ref too), so `nix flake update` follows the
release branch instead of the forge's default branch. README quickstart
points at the real forge.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

flake.nix

@@ -45,11 +45,13 @@
           (nixpkgs.lib.concatStringsSep "\n"
             (builtins.attrNames nixos-hardware.nixosModules));
         nixpkgsPath = nixpkgs.outPath;
-        flakeUrl = "git+${gitUrl}";
+        # v1 is the release branch: installed machines track it on
+        # `nix flake update` instead of the forge's default branch.
+        flakeUrl = "git+${gitUrl}?ref=v1";
         # Future updates re-resolve from the forge (original); the install
         # itself resolves from the ISO store (locked = path) — fully
         # offline, even from a dirty-tree ISO.
-        originalNode = { type = "git"; url = gitUrl; };
+        originalNode = { type = "git"; url = gitUrl; ref = "v1"; };
         lockedNode = {
           type = "path";
           path = self.outPath;