Use NixOS 1Password modules for proper CLI-GUI integration

Raw _1password-cli and _1password-gui packages don't set up the
onepassword-cli group, setgid bit, or polkit policy needed for
CLI-to-desktop-app communication. The NixOS modules handle this.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

nixos/ringtail/configuration.nix

@@ -72,6 +72,13 @@
   # Fish shell
   programs.fish.enable = true;
 
+  # 1Password (modules handle CLI group/setgid and polkit for GUI integration)
+  programs._1password.enable = true;
+  programs._1password-gui = {
+    enable = true;
+    polkitPolicyOwners = [ "eblume" ];
+  };
+
   # Steam
   programs.steam = {
     enable = true;
@@ -111,8 +118,6 @@
     htop
     curl
     wget
-    _1password-cli
-    _1password-gui
     chezmoi
     neovim
     eza