Restructure packages into per-program home/programs/ modules

Replaces the monolithic packages-marvin.nix with one file per program
so hosts can opt in selectively. Adds docker, clamav, steam, and
audio keybindings for hivebrain. Fixes monitor order and switches
volume widget to PulseVolume.

system/networking.nix

@@ -2,4 +2,8 @@
 
 {
   networking.networkmanager.enable = true;
+
+  # Steam LAN game transfer + Remote Play
+  networking.firewall.allowedTCPPorts = [ 27036 27037 27040 ];
+  networking.firewall.allowedUDPPorts = [ 27031 27036 ];
 }