kyra(hardening): tmpfs rootfs init

Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>

kyra/disko/nodev.nix

@@ -0,0 +1,18 @@
+_: {
+  disko = {
+    devices = {
+      nodev = {
+        "/" = {
+          fsType = "tmpfs";
+          mountOptions = [
+            "size=1G"
+            "mode=755"
+            "nodev"
+            "nosuid"
+            "rw"
+          ];
+        };
+      };
+    };
+  };
+}