Split niri, hypr, fish into submodules; tmux, tmux-palette, television, yazi into externals

.chezmoiignore.tmpl

@@ -12,17 +12,14 @@ bun.lock
 public
 dist
 
-# Linked, not copied: ~/.config/television and ~/.config/yazi are symlinks to
-# these directories (dot_config/symlink_*.tmpl), so edits apply without
-# chezmoi apply.
-television
-yazi
-
 # Runtime/plugin state living inside managed trees — not managed
 .config/lazygit/.omc/**
 .config/tmux/plugins/**
 !.config/tmux/plugins/tpm
 .config/fish/fish_variables
+
+# Plaintext tokens — local-only, never in git. Rotate anything ever committed.
+.config/fish/conf.d/secrets.fish
 .config/nvim/lazy-lock.json
 .config/nvim/.git
 .config/nvim/.git/**
@@ -38,6 +35,8 @@ yazi
 # Arch desktop layer — linux desktop/laptop roles only
 .config/niri
 .config/niri/**
+.config/hypr
+.config/hypr/**
 .config/noctalia
 .config/noctalia/**
 .config/niri-dynamic-workspaces
@@ -51,7 +50,6 @@ yazi
 .local/bin/niri-launch
 .config/fish/auto-Niri.fish
 .local/bin/cp-appid
-.config/tmux/niri-title.sh
 {{ end }}
 
 # Runtime plugin state with embedded tokens — never managed