Add Navidrome and system services modules

Configure Navidrome settings (MusicFolder, Port 4533, Address 0.0.0.0),
open firewall and create tmpfiles entry for the music directory.

Enable system services: weekly fstrim, zram swap (zstd), Avahi mDNS,
psd,
fwupd, earlyoom and plocate

modules/virtualization.nix

@@ -13,12 +13,6 @@
     qemu = {
       package = pkgs.qemu_kvm;
 
-      # Enable UEFI support for VMs
-      ovmf = {
-        enable = true;
-        packages = [ pkgs.OVMFFull.fd ];
-      };
-
       # Enable TPM emulation for Windows 11
       swtpm.enable = true;