Fix flake.lock bump host-check regressions

[Copilot]

The scheduled flake.lock bump advanced inputs in ways that broke host evaluation for redo-2 and romeo-2. This PR carries forward the lockfile update and applies the smallest config fixes needed to restore those host checks.

• Lockfile update

  • Include the updated flake.lock from the scheduled bump branch.

• Home Manager MCP compatibility

  • Update the AWS support MCP server config to pass command as a string path, matching newer Home Manager type validation.

  programs.mcp.servers.aws-support-mcp-server = {
    command = "${awsSupportLauncher}";
  };

• Romeo Jellyfin hash override

  • Extend the temporary nixarr source patch on romeo to cover Jellyfin 10.11.11, which the bumped inputs now select.
  • Keep the existing local override approach and only add the missing OpenAPI hash entry.

• Scope

  • No broader refactors or nixarr/Home Manager reshaping; only the lockfile bump and the two evaluation fixes surfaced by that bump.