WGU prep: Windows VM setup, trackpad/trackpoint tweaks, aliases

- Add WGU Windows VM helper script + virtualization module (KVM/libvirt)
- Fix create-wgu-vn: mkdir before use, CPU topology, detect OS variant
- Add Webex, ZapZap, qalculate-gtk, libqalculate, tigervnc packages
- Add n97-mini VNC alias, switch nr to local flake path
- Tune trackpad (0.44) and TrackPoint (160/120) sensitivity
- Reduce mouse sensitivity to -0.2
- Move zapzap from desktop.nix alphabetically
- Remove OVMFFull from virtualisation (handled by swtpm/OVMF default)
- Bump flake inputs (home-manager, nixos-hardware, nixpkgs, pi-mono)

modules/t490.nix

@@ -191,7 +191,7 @@
     touchpad = {
       tapping = true;
       naturalScrolling = true;
-      accelSpeed = "0.3";
+      accelSpeed = "0.44";
       disableWhileTyping = true;
     };
   };
@@ -199,6 +199,6 @@
   # TrackPoint sensitivity
   services.udev.extraRules = ''
     ACTION=="add", SUBSYSTEM=="input", ATTR{name}=="*TrackPoint*", \
-      ATTR{device/sensitivity}="200", ATTR{device/speed}="150"
+      ATTR{device/sensitivity}="160", ATTR{device/speed}="120"
   '';
 }

modules/virtualization.nix

@@ -0,0 +1,38 @@
+{ config, pkgs, lib, ... }:
+
+{
+  # === KVM / QEMU / libvirt — Windows VM for WGU Guardian browser ===
+
+  # Enable KVM — kernel module + group
+  boot.kernelModules = [ "kvm-amd" "kvm-intel" ];
+  boot.extraModulePackages = [ ];
+
+  # libvirt daemon
+  virtualisation.libvirtd = {
+    enable = true;
+    qemu.swtpm.enable = true;  # TPM emulation (required for Windows 11)
+  };
+
+  # User in libvirt group (manages VMs without sudo)
+  users.users.sscoble.extraGroups = [ "libvirtd" ];
+
+  environment.systemPackages = with pkgs; [
+    # VM manager (GUI — launch from rofi)
+    virt-manager
+    virt-viewer                     # Spice client (better than virt-manager's built-in)
+    spice-gtk                       # Spice protocol (clipboard, USB, audio)
+
+    # Software TPM
+    swtpm
+
+    # Guest tools
+    spice-vdagent                   # Clipboard sync, auto-resize
+  ];
+
+  # Enable Spice USB redirection service
+  services.spice-vdagentd.enable = true;
+
+  # Firewall: allow VNC/Spice from localhost only (safe for guest display)
+  networking.firewall.allowedTCPPorts = [ ];
+  networking.firewall.allowedUDPPorts = [ ];
+}