Repo is now self-contained: flake.nix (tools-gateway/tools-workers/tools-frontend) + deploy.yml matrix (nix build -> nix copy -> nix-env profile -> systemctl restart). No longer dispatches submodule-updated to asepharyana-hub.
