feat(services): curate tor + pcscd, filter @ templates from drift

- tor.service -> systemd-units/btc.txt (pairs with tor in meta/btc.txt)
- pcscd.socket -> systemd-units/base.txt (smartcards, used by GPG)
- services-drift now filters @-template units (getty@ etc.), which
  are abstract and can't be curated meaningfully anyway

systemd-networkd.{service,socket,wait-online} remain uncurated;
that's a real decision (conflicts with iwd) left to disable by hand.

3 files changed, 6 insertions, 1 deletions

diff --git a/justfile b/justfile
index 66bac80..ede837f 100644
--- a/justfile
+++ b/justfile
@@ -168,7 +168,7 @@ services-drift:
     cat systemd-units/*.txt 2>/dev/null \
         | grep -v '^\s*#' | grep -v '^\s*$' | sort -u > "$tmp/curated"
     systemctl list-unit-files --state=enabled --no-legend 2>/dev/null \
-        | awk '{print $1}' | sort -u > "$tmp/enabled"
+        | awk '{print $1}' | grep -vE '@\.' | sort -u > "$tmp/enabled"
     comm -23 "$tmp/curated" "$tmp/enabled" | sed 's/^/  not-enabled: /'
     comm -13 "$tmp/curated" "$tmp/enabled" | sed 's/^/  uncurated:   /'
 
diff --git a/systemd-units/base.txt b/systemd-units/base.txt
index bec3556..8f8a526 100644
--- a/systemd-units/base.txt
+++ b/systemd-units/base.txt
@@ -11,3 +11,4 @@ acpid.service
 cpupower.service
 iwd.service
 tlp.service
+pcscd.socket
diff --git a/systemd-units/btc.txt b/systemd-units/btc.txt
new file mode 100644
index 0000000..b30199c
--- /dev/null
+++ b/systemd-units/btc.txt
@@ -0,0 +1,4 @@
+# Systemd units to enable when the 'btc' meta group is installed.
+# One unit per line, # comments OK.
+
+tor.service