feat(audit): address batch 4 and finalize script audit

- Implement nomarchy-skill, nomarchy-manual, nomarchy-backup, nomarchy-install
- Implement nomarchy-install-docker-dbs (stub)
- Port nomarchy-docs-keybindings and nomarchy-docs-scripts to packaged scripts
- Add installerVm to flake.nix nixosConfigurations, packages, and apps
- Update nomarchy-test-installer to use nix run .#installerVm
- Add docker support to virtualization.nix and options.nix
- Add glow to script dependencies
- Finalize docs/SCRIPTS.md update

core/system/options.nix

@@ -96,6 +96,12 @@
           `libvirtd` group.
         '';
       };
+      docker = {
+        enable = lib.mkEnableOption ''
+          Docker daemon + docker-compose. The user must be in the `docker`
+          group.
+        '';
+      };
     };
 
     keyring = {

core/system/virtualization.nix

@@ -2,6 +2,7 @@
 
 let
   libvirt = config.nomarchy.system.virtualization.libvirt.enable;
+  docker = config.nomarchy.system.virtualization.docker.enable;
 in
 {
   # uwsm + Hyprland session — present on every Nomarchy install regardless
@@ -23,4 +24,10 @@ in
     qemu
     OVMF
   ]);
+
+  # Optional: Docker + docker-compose.
+  virtualisation.docker.enable = lib.mkIf docker true;
+  environment.systemPackages = lib.mkIf docker (with pkgs; [
+    docker-compose
+  ]);
 }