Add copilot-api package and service

- Package copilot-api (GitHub Copilot API proxy) using bun
- Create systemd service module for copilot-api
- Enable service on ganymede listening on localhost:4141
- Add SSH port forwarding from mercury to ganymede for copilot-api
- Update gitignore to exclude Claude Code artifacts

Co-Authored-By: Claude (claude-sonnet-4.5) <noreply@anthropic.com>

2 files changed, 21 insertions, 0 deletions

diff --git a/hosts/ganymede/config.nix b/hosts/ganymede/config.nix
index b968e3f..70cbfb2 100644
--- a/hosts/ganymede/config.nix
+++ b/hosts/ganymede/config.nix
@@ -22,6 +22,11 @@
         file = ./secrets/wireguard-pk.age;
         owner = "systemd-network";
       };
+
+      "copilot-token" = {
+        file = ./secrets/copilot-token.age;
+        owner = "copilot-api";
+      };
     };
 
     terminal = {
@@ -112,6 +117,11 @@
         enable = true;
         envFile = config.collinux.secrets."caddy-env".path;
       };
+
+      copilot-api = {
+        enable = true;
+        githubToken = config.collinux.secrets."copilot-token".path;
+      };
     };
   };
 }
diff --git a/hosts/ganymede/secrets/copilot-token.age b/hosts/ganymede/secrets/copilot-token.age
new file mode 100644
index 0000000..7dd6e51
--- /dev/null
+++ b/hosts/ganymede/secrets/copilot-token.age
@@ -0,0 +1,11 @@
+-----BEGIN AGE ENCRYPTED FILE-----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+-----END AGE ENCRYPTED FILE-----