turny: fix SPI/GPIO config for newer kernels

- Add complete config.txt settings with u-boot boot lines + spi=on
- Override sdImage.populateFirmwareCommands to use configtxt module output
- Mount firmware partition and add activation script to sync config.txt
- Load spi_bcm2835 and bcm2835_gpiomem kernel modules
- Add udev rule for gpiomem subsystem (not just gpio)
- Relax ProtectKernelTunables so service can access GPIO
- Update turny flake input to rppal-based CS pin fix

home/moco/default.nix

@@ -52,6 +52,8 @@ in
           ${ykman} oath accounts code -s 'MOCO Reto' | ${nmcli} c up moco --ask
         fi
       '')
+      kreuzberg-cli
+      tesseract
     ];
   };
 
@@ -217,4 +219,11 @@ in
         user = "butler";
       };
     };
+
+  programs.noctalia.settings.calendar.account.moco = {
+    type = "caldav";
+    provider = "custom";
+    name = "MOCO";
+    server_url = "https://intern.mocoapp.com/users/933620701/calendar/9df64d69e29c97a75cd6d93aeec0d5ae.ics";
+  };
 }