pocket-id: add service on trantor

- Add pocket-id service with nginx reverse proxy
- Domain: auth.baduhai.dev
- Uses SQLite database
- Generate encryption key stored in age secrets

aspects/hosts/_trantor/pocket-id.nix

@@ -0,0 +1,17 @@
+{
+  config,
+  lib,
+  ...
+}:
+
+{
+  services.pocket-id = {
+    enable = true;
+    environmentFile = "/etc/nixos/secrets/pocket-id.key";
+    settings = {
+      APP_URL = "https://auth.baduhai.dev";
+      TRUST_PROXY = true;
+      ANALYTICS_DISABLED = true;
+    };
+  };
+}